@vercel/cli-exec

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, leaving some uncertainty that this monorepo is the package's dedicated source context; organizational backing partly offsets that concern.

Workflow auditcaution

The audit covered 24 workflows but one file failed and found 15 high-confidence template-injection findings plus many unpinned action uses and ad hoc package installs. No untrusted checkouts or script-injection paths were found, so these are workflow hygiene concerns rather than a standalone severe dependency-health risk.