@oxc-resolver/binding-linux-arm64-gnu

Repo package mentioncaution

The linked repository name does not match this platform binding and its README does not mention the package, so the package-to-repository relationship is less transparent; the monorepo context partly explains the name mismatch but not the missing mention.

Workflow auditcaution

All eight workflows were analyzed, use read-only permissions, and have no untrusted checkouts or script injection; however, a high-confidence finding says release.yml grants an app token blanket installation permissions, creating a meaningful permissions-hygiene concern.