@libsql/linux-x64-gnu

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, so the package-to-source relationship is less transparent; this may still reflect a platform subpackage in a monorepo.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security-scanning tools were detected, leaving a modest process gap.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and response.

Version stabilitycaution

Version 0.5.29 is not a stable-major release, and 40% of recent releases were prereleases, so consumers should expect some pre-1.0 compatibility risk.

Workflow auditcaution

The sole workflow grants top-level write permissions and leaves all 28 action references unpinned; the audit also found a high-confidence adhoc package installation. The cache-poisoning findings are low-confidence hygiene warnings, and no untrusted checkout or script-injection sink was found.