@solana/fast-stable-stringify

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-repository relationship is less transparent even though a monorepo subpackage can explain the name mismatch.

Workflow auditcaution

The audit found high-confidence template-injection findings in the publishing workflow, an untrusted checkout in a pull_request_target workflow, broad top-level write permissions, and three unpinned actions. These are meaningful supply-chain hygiene concerns despite complete audit coverage.