hermes-parser

Repo package mentioncaution

The linked repository name does not match hermes-parser and its README does not mention the package, creating uncertainty about whether this repository directly represents the published package; organization backing and the substantial artifact provide partial context but do not remove the mismatch.

Workflow auditcaution

All 46 action references are unpinned, and the audit found high-confidence template-injection and floating-image findings plus secrets inheritance. These are workflow hygiene weaknesses, but no untrusted checkout or script-injection path was reported and permissions are not broadly write-enabled.