@swc/core-linux-x64-gnu

Repo package mentioncaution

The linked repository name does not match this platform-specific package and its README does not mention the exact package name. This is plausible for a monorepo subpackage, but the lack of an explicit mention leaves a small transparency gap.

Workflow auditcaution

All 16 workflows were analyzed, all use read-only permissions, and all 128 action references are pinned. Three medium-confidence template-injection findings and several high-confidence low-severity ad hoc package installs are workflow hygiene concerns, but there are no untrusted checkouts, script-injection findings, or writable top-level tokens.