@msgpackr-extract/msgpackr-extract-linux-arm64

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer does not have broader organizational backing visible in the collected evidence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern despite a release being published recently.

Repo package mentioncaution

The repository name does not match this platform package and its README does not mention the package, so the linkage is less transparent than expected, although this may reflect a platform-specific subpackage.

Security policycaution

No repository security policy was found, which reduces the documented path for reporting vulnerabilities, but this is a documentation gap rather than evidence of abandonment.

Workflow auditcaution

All 9 action references are unpinned, and the workflow has a high-confidence unpinned container image finding. The cache-poisoning findings are low confidence and therefore add little weight.