@unrs/resolver-binding-wasm32-wasi

Workflow auditdanger

All 9 workflows were analyzed, all 46 action references are pinned, and all workflows have read-only permissions. However, a high-confidence finding reports a release workflow app token with blanket installation permissions; a separate low-severity finding installs a package outside a lockfile.

Release historycaution

The package has 40 releases over 542 days, but only 3 in the last 12 months; this suggests a slower recent cadence while still showing an established release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, even though the repository was recently pushed and the package has released versions.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, creating uncertainty about the exact package-to-repository association. The mismatch may be normal for a monorepo subpackage, but the missing mention remains a transparency gap.