@ast-grep/napi-linux-x64-gnu

Build provenancecaution

No build attestation or trusted publisher provenance is present, leaving the binary's build origin less independently verifiable despite the active source project.

Repo bus factorcaution

Seven contributors were active, but one contributor made about 85% of the 54 recent commits. Organization backing partly offsets this concentration, but it remains a continuity risk.

Repo package mentioncaution

The repository name does not match this platform-specific package and its README does not mention it. That is plausible for a monorepo binary package, but the missing explicit mention leaves package-to-repository linkage less transparent.

Repo toolingcaution

No build tooling or security-scanning tooling was detected in the repository metadata, which weakens visible engineering and security hygiene.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.