@tanstack/match-sorter-utils

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, creating some ownership ambiguity. The organization-backed monorepo context partly offsets that concern, but the package-to-repository link is not explicit.

Security policycaution

No repository security policy was found, leaving vulnerability reporting guidance less explicit than ideal.

Workflow auditcaution

All five workflows were analyzed, use read-only permissions, and have no unpinned actions or untrusted checkouts. One high-confidence low-severity finding shows a workflow installs a package outside a lockfile, a limited hygiene concern.