@algolia/cache-browser-local-storage

Build provenancecaution

No build attestation or trusted-publisher provenance is provided, leaving publication origin less independently verifiable.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, so package ownership is somewhat less transparent despite the organization-backed monorepo context.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All 3 workflows were analyzed successfully, all 4 action references are pinned, and no audit findings or untrusted checkouts were reported. One workflow has top-level write permissions, a mild concern without an untrusted path to exploit them.