@biomejs/cli-linux-x64

Repo package mentioncaution

The repository name does not match this platform package and its README does not mention the package, so the package-to-source relationship is less explicit than ideal. The monorepo context partly explains the name mismatch but not the absent mention.

Repo toolingcaution

The repository uses a build tool, but no security-scanning tools were detected. The missing scanning tooling is a modest transparency and assurance gap, not evidence of abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear despite the project’s strong maintenance activity.

Workflow auditcaution

All 25 workflows were analyzed and no untrusted checkout or script-injection sink was found, but several workflows use unpinned tool versions and the audit reports trusted-publishing concerns. Low-confidence cache findings are hygiene only.