react-router-dom

Repo package mentioncaution

The repository name differs from the package name and its README does not mention react-router-dom. The mismatch is consistent with a subpackage in a monorepo, but the lack of an explicit README mention leaves a small transparency gap.

Token permissionscaution

Seven workflows lack top-level permissions and two declare top-level write permissions, creating a modest configuration-hygiene concern; however, ten workflows explicitly use read-only permissions and no dangerous workflow behavior was detected.