@msgpackr-extract/msgpackr-extract-darwin-arm64

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have less independent evidence tying the published native binary to its source build.

Maintainerscaution

Only one registry publishing account is listed, leaving limited publishing redundancy for a user-owned project, though this is partly consistent with the linked repository being owned by that same account.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a meaningful maintenance concern for a package that distributes native binaries.

Repo package mentioncaution

The repository name does not match the full package name and its README does not mention this package, so the linkage is less transparent; the name mismatch is plausible for a platform subpackage, but the missing README mention remains a caution.

Security policycaution

The repository has no published security policy, which reduces transparency for reporting vulnerabilities, although this is a small focused native module.