@swc-node/sourcemap-support

Repo package mentioncaution

The linked monorepo neither matches the package name nor mentions it in its README, which makes package-to-repository linkage less direct; organizational backing and the monorepo layout partly offset that concern.

Workflow auditcaution

The workflow is fully analyzed with no untrusted checkouts or script injection, and job-level permissions are scoped. However, all six actions are unpinned and a high-confidence low-severity finding reports installing a package outside a lockfile.