@esbuild/android-arm

Repo bus factorcaution

One contributor made about 91% of the 34 recent commits, leaving a concentrated maintenance base. The presence of three additional contributors provides some mitigation, so this is a caution rather than a severe risk.

Repo toolingcaution

The repository uses build tooling, but no security-scanning tools were detected. That is a modest transparency gap, partly offset by the active project and release provenance.

Security policycaution

No repository security policy was found. This limits disclosure transparency, but it is a secondary concern for an otherwise actively maintained package.

Workflow auditcaution

All four workflows were analyzed, all 19 action references are pinned, and most workflows use read-only permissions. A high-severity cache-poisoning finding has low confidence, while high-confidence archived-action and ad hoc package findings are workflow hygiene concerns; no untrusted checkout or script-injection paths were found.