lightningcss-darwin-x64

Repo commit activitycaution

Only 5 commits from 2 active maintainers were recorded in the last 3 months, so recent development is modest despite the current release history.

Repo package mentioncaution

The repository name does not match this platform-specific package and its README does not mention the package, creating uncertainty about the linkage; the mismatch is partly explainable by a monorepo or platform-package layout.

Repo toolingcaution

The project uses established build tooling, but no security scanning tools were detected, leaving a modest transparency and defense-in-depth gap.

Security policycaution

No repository security policy was found, reducing clarity about vulnerability reporting and handling.

Workflow auditcaution

All 49 analyzed action references are unpinned, and high-confidence trusted-publishing findings appear in release workflows; one workflow also grants top-level write permissions. No untrusted checkout or script-injection path was found, limiting the severity.