@ast-grep/napi-linux-x64-musl

Repo package mentioncaution

The linked repository name does not match this platform package and its README does not mention the package, so ownership of this exact artifact is less transparent despite the matching organization namespace.

Workflow auditcaution

All 78 analyzed action references are unpinned, and high-confidence trusted-publishing findings indicate registry credentials are used instead of short-lived credentials. The cache-poisoning findings are low confidence and are treated as hygiene rather than a severe risk.