@angular/material

Build provenancecaution

No build attestation or trusted publisher is reported, leaving publication provenance less transparent than it could be. This is a moderate transparency gap, not evidence that the release is unsafe.

Repo toolingcaution

The project uses established TypeScript, npm, esbuild, Rollup, and Babel tooling. No repository security-scanning tool is reported, which is a minor hygiene gap partly offset by the security policy and workflow audit.