eslint-config-turbo

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which creates some uncertainty about package-to-repository correspondence; the monorepo context makes a name mismatch alone ordinary, but the missing README mention remains a caution.

Workflow auditcaution

All workflows were analyzed and all 73 action references are pinned, but the audit found a high-confidence template-injection issue, several secrets-inherit findings, ad hoc package installs, and a trusted-publishing finding; one workflow also grants top-level write access. No untrusted checkout or script-injection sink was found.