eslint-config-turbo

Repo bus factorcaution

One contributor made about 85% of recent commits, which is a concentration risk, but 26 contributors were active and the repository is owned by an organization that can redistribute work.

Repo package mentioncaution

The repository name does not match the package and its README does not mention eslint-config-turbo, creating some uncertainty about the exact package-to-repository mapping; the package may be a subproject of the monorepo.

Workflow auditcaution

All 12 workflows were analyzed and all 72 action references are pinned, with 11 workflows using read-only permissions. High-confidence template injection, inherited secrets, ad hoc package installs, and trusted-publishing findings leave a workflow hygiene concern, although no untrusted checkout or script-injection sink was found.