@secretlint/types

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, so the package-to-repository relationship is less explicit than ideal, although the organization-backed monorepo context partly reduces concern.

Workflow auditcaution

All eight workflows were analyzed with no untrusted checkouts, script injection, or unpinned actions. One high-confidence medium-severity finding concerns an archived action, and three workflows use top-level write permissions, so workflow hygiene is not perfect.