turbo-windows-64

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this exact package, which creates some package-to-repository linkage uncertainty; the artifact README nevertheless identifies it as a platform-specific Turborepo binary and links to that repository.

Workflow auditcaution

All 12 workflows were analyzed with no unpinned actions, but high-confidence template injection, inherited secrets, ad hoc package installs, and trusted-publishing findings create release-process hygiene concerns. No untrusted checkout or script-injection sink was found, limiting the severity.