@oven/bun-linux-x64-musl

Build provenancecaution

No build attestation or trusted publisher identity is recorded for the package, leaving provenance less transparent than it could be. Active repository and release evidence partly compensates for this gap.

Workflow auditcaution

All 64 action references are pinned and 29 workflows use read-only permissions, with no untrusted checkout or script-injection findings. However, only 30 of 31 workflows were analyzed, one workflow has top-level write permissions, and high-confidence use-trusted-publishing findings warrant caution.