@esbuild/linux-x64

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated recent commit activity is not offset by visible organizational handoff capacity.

Repo bus factorcaution

One contributor made about 91% of recent commits, leaving substantial continuity risk despite three additional contributors making commits.

Repo toolingcaution

The project uses build tooling, but no security-scanning tools were detected; this is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, reducing clarity about vulnerability reporting and response procedures.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkout or script-injection paths and all 19 action references pinned. The audit still found a high-severity cache-poisoning pattern at low confidence, an archived action, and several ad hoc package installs; these are workflow hygiene concerns, not standalone severe risks.