eslint-plugin-turbo

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating some uncertainty about package-to-repository linkage; the mismatch is consistent with a sub-package in a monorepo but remains a transparency gap.

Workflow auditcaution

All 12 workflows were analyzed and all 72 action references are pinned, but the audit found a high-confidence template-injection issue, inherited secrets, and trusted-publishing usage. The template-injection finding has no untrusted checkout or script-injection trigger in the reported paths, limiting its direct severity.