turbo-linux-64

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the link is less explicit than ideal; this is a caution for package provenance context, though the README identifies it as a Turborepo platform binary.

Workflow auditcaution

All 12 workflows were analyzed, with all 69 action references pinned and 11 workflows using read-only permissions. High-confidence secrets inheritance, adhoc package installs, and trusted-publishing findings are hygiene cautions, while the template-injection finding is not paired with an untrusted checkout or script-injection trigger in the reported paths.