@unrs/resolver-binding-linux-s390x-gnu

Release historycaution

The package is about 542 days old with 40 releases and three releases in the last 12 months, showing an established release history but a relatively quiet recent cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern despite the recent push timestamp elsewhere in the repository signals.

Repo package mentioncaution

The repository name does not match this platform-specific subpackage and its README does not mention the package, which weakens package-to-repository transparency; the mismatch is understandable for a monorepo subpackage but the missing mention remains a caution.

Workflow auditcaution

All nine workflows were analyzed, use read-only permissions, and pin all 46 analyzed action references. However, a high-confidence finding reports blanket app-token permissions in the release workflow, which creates a real supply-chain hygiene concern; the low-confidence adhoc-package finding is minor.