@tanstack/table-core

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @tanstack/table-core, which creates some package-to-repository transparency uncertainty; the package is also plausibly a monorepo subpackage.

Security policycaution

The repository has no SECURITY.md policy, leaving vulnerability-reporting guidance less explicit than ideal for a widely used library.

Workflow auditcaution

All five workflows were analyzed, use read-only permissions, and have no unpinned actions or untrusted checkouts. The high-confidence low-severity finding is an adhoc package install outside a lockfile, a minor reproducibility hygiene concern.