@msgpackr-extract/msgpackr-extract-win32-x64

Build provenancecaution

No build attestation or trusted-publisher metadata is present, so consumers have limited independent evidence connecting the published native binaries to their build process.

Maintainerscaution

Only one registry account has publish access. That is a thin publishing base and leaves limited redundancy if the maintainer becomes unavailable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The recent release partly offsets this for a small stable binary package, but the lack of current development activity remains a maintenance concern.

Repo package mentioncaution

The repository name does not match this platform-specific package and its README does not mention the package, creating uncertainty about the package-to-repository relationship. This is more concerning than a normal monorepo subpackage mismatch.

Security policycaution

The repository has no security policy, reducing disclosure transparency, though the package has security scanning configured.