@napi-rs/canvas-darwin-x64

Repo bus factorcaution

The top contributor made about 73% of recent commits, which concentrates maintenance; two other contributors remain active, partly reducing the risk.

Repo package mentioncaution

The repository name does not match this platform package and its README does not mention the package, creating some uncertainty about the linkage; the package is clearly a platform-specific subpackage, which partly explains the mismatch.

Workflow auditcaution

All 96 analyzed action references are unpinned, and the audit found high-confidence low-severity ad hoc package installs; low-confidence cache findings and limited top-level write permissions add workflow hygiene concerns, but no untrusted checkout or script-injection path was found.