@a2ui/web_core

Build provenancecaution

No build attestation or trusted publisher identity is present, leaving release origin less independently verifiable even though other maintenance signals are strong.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @a2ui/web_core, creating some uncertainty about package-to-repository linkage; the organization-backed monorepo and matching namespace partly compensate.

Repo toolingcaution

The project uses npm scripts and TypeScript, but no security scanning tools were detected; the build setup is established while automated security coverage is a gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Version stabilitycaution

Version 0.11.0 is not yet a stable major release, and 28% of recent releases were prereleases, so the API may still change despite the current release itself not being marked prerelease.