@libsql/linux-x64-musl

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the package-to-repository relationship is less transparent. The package's platform-specific subpackage role partly explains the name mismatch but not the missing README mention.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap, not evidence of abandonment.

Security policycaution

No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities, though it does not by itself show that the release is unsafe.

Version stabilitycaution

Version 0.5.29 is not a prerelease, but the package remains below a stable major version and 40% of recent releases were prereleases. This is a modest stability concern rather than a severe risk.

Workflow auditcaution

The single workflow was fully analyzed, but all 28 action references are unpinned and it grants top-level write permissions. A high-confidence low-severity finding also reports installing a package outside a lockfile; the cache-poisoning findings are low confidence and count only as hygiene.