@swc/core-win32-x64-msvc

Repo package mentioncaution

The linked repository name does not match this platform-specific package and its README does not mention the exact package, creating a provenance-transparency caution. The organization backing and package's clearly platform-specific binary role partly compensate for the monorepo mismatch.

Workflow auditcaution

All 16 workflows were analyzed, all use read-only permissions, and all 128 action references are pinned. Medium-confidence template-injection findings and high-confidence ad hoc package installs are workflow hygiene concerns, but no untrusted checkout or script-injection path was found.