@nx/nx-linux-arm64-musl

Maintainerscaution

Five registry publishers are listed, four using the organization domain nrwl.io; jameshenry (henry.sc) is an outside-domain account, which is an account-hygiene caution but not evidence of weak maintenance capacity.

Repo package mentioncaution

The repository name does not match this platform-specific package and its README does not mention the package, which creates some ownership ambiguity; the monorepo context makes a name mismatch ordinary but does not compensate for the missing README mention.

Workflow auditcaution

All 13 workflows were analyzed and all 81 action references are pinned, with no untrusted checkouts or script-injection findings. However, high-confidence template-injection findings and high-confidence adhoc-packages findings remain workflow hygiene concerns; the low-confidence cache-poisoning findings do not materially change the assessment.