@sentry-internal/browser-utils

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, so the link is less directly transparent; the organization-backed monorepo context partly explains but does not remove that concern.

Workflow auditcaution

All 26 workflows were analyzed, but 145 of 164 action references are unpinned and high-confidence github-app findings report blanket app-token permissions; low-confidence cache findings and an archived action add hygiene concerns. No untrusted checkout or script-injection sink was found, limiting the impact.