but they have a eslint.config.mjs, possibly from codegen, even though their lint and lint:fix does nothing other than "echo skipped".

If we run npx eslint under for such a package, we will get error

It probably doesn't hurt to add that dev dep to every SDK package.