@intentius/chant-lexicon-github@0.18.2

One or more suspicious static signals were detected.

Explicit developer generation or packaging command

No confirmed credential harvesting, exfiltration, persistence, destructive action, or remote payload execution.

GitHub Actions lexicon generation, validation, and local artifact packaging

Source inspection shows a package-aligned GitHub Actions lexicon with explicit build/generation utilities, not an install-time or covert execution chain. Scanner signals arise from fixed runtime imports and intentional secret-detection test fixtures.