@types/bytes

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in its README, creating some uncertainty about package-to-repository mapping; the published README does identify the DefinitelyTyped source path, which partly compensates.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and there are no untrusted checkouts, script injections, or top-level write permissions. Four medium-confidence template-injection findings remain as workflow hygiene concerns.