@rolldown/binding-linux-x64-musl

Workflow auditcaution

All 26 workflows were analyzed with no untrusted checkouts, script injection, or unpinned action references, and 24 use read-only permissions. Four high-confidence github-app findings show blanket app-token permissions, while a low-severity finding installs a package outside a lockfile; these are real workflow hygiene concerns but not evidence that the release itself is unfit.