@msgpackr-extract/msgpackr-extract-linux-arm

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-owned, so this thin publishing and apparent project base carries some continuity risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent package release partly compensates, but the lack of current repository activity still raises maintenance concern.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, so the linkage is less transparent even though a subpackage or platform binary can reasonably share a source repository.

Workflow auditcaution

All 9 analyzed action references are unpinned, including a high-confidence unpinned container image finding. The cache-poisoning findings are low confidence and add only limited hygiene concern.