turbo-ignore

Maintainerscaution

Publishing is primarily tied to vercel.com accounts, consistent with the organization-backed repository; jaredpalmer (palmer.net) is an outside-domain publishing account and adds a minor account-hygiene concern.

Repo bus factorcaution

One contributor made about 85% of recent commits, creating concentration risk, although 26 active contributors and organization backing provide meaningful compensation.

Repo package mentioncaution

The repository name does not match turbo-ignore and its README does not mention the package, creating some uncertainty about package-to-repository ownership; the package appears to be a subpackage of the linked monorepo, which partly explains the mismatch.

Workflow auditcaution

All 12 workflows were analyzed with no untrusted checkout or script-injection findings and all 72 action references pinned; high-confidence template injection, inherited secrets, ad hoc package installs, and one broad write permission remain workflow-hygiene concerns.