@oxc-parser/binding-linux-x64-musl

Repo package mentioncaution

The repository name does not match this platform binding and its README does not mention the package, so package ownership is less directly transparent. The organization-owned monorepo context partly explains the mismatch but does not remove the documentation gap.

Workflow auditcaution

All 209 analyzed action references are pinned, permissions are read-only or job-scoped in 30 workflows, and no untrusted checkout or script-injection sinks were found. However, eight high-confidence github-app findings report blanket installation permissions, creating a workflow hygiene concern.