oxc-transform

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating some uncertainty about package-to-repository mapping; the organization-owned monorepo context partly explains the mismatch but does not remove it.

Workflow auditcaution

All analyzed action references are pinned and most workflows use read-only permissions, but 8 high-confidence github-app findings report blanket app-token permissions; the audit also covered only 30 of 32 workflows, so this is a caution.