sass-embedded-linux-x64

Licensecaution

The manifest declares MIT and the artifact includes a license file, but the detected file also identifies BSD-3-Clause and Apache-2.0, so the license scope is broader than the declaration.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts or script injection, but all 16 action references are unpinned and the release workflow installs a package outside a lockfile; the high-confidence findings warrant workflow hygiene caution.