@next/swc-linux-x64-musl

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, which weakens direct package-to-repository traceability. The package is clearly a platform subpackage of the linked monorepo, so this is a limited transparency concern rather than a severe mismatch.

Workflow auditcaution

All 29 workflows were analyzed with no untrusted checkouts or script injections, and only 1 of 134 action references is unpinned. However, high-confidence template-injection findings occur in workflows using workflow_run or release-related automation, alongside high-confidence secrets-inherit findings; these warrant workflow hardening.