@next/swc-linux-arm64-gnu

Repo package mentioncaution

The linked Next.js repository neither matches this package name nor mentions it in its README, creating an association gap; the package's scoped name and platform-binary role make a monorepo relationship plausible, which partly offsets the concern.

Workflow auditcaution

All 30 workflows were analyzed and 140 of 141 action references are pinned, but high-confidence template-injection findings and repeated secrets-inherit findings are notable workflow hygiene concerns; the absence of untrusted checkouts limits their assessed impact.