@oxc-minify/binding-linux-x64-gnu

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, so the package-to-source relationship is not explicit; the monorepo context makes this plausible but still warrants verification.

Workflow auditcaution

The audit found eight high-confidence github-app findings where workflows inherit blanket installation permissions, creating a meaningful CI credential-hygiene concern. The audit also covered 30 of 32 workflows, although references were fully pinned and no untrusted checkout or script-injection sinks were found.