@azure/core-paging

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable despite the package's established project backing.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention @azure/core-paging, which creates some uncertainty about package-to-repository linkage; the Azure monorepo context provides partial compensation.

Repo toolingcaution

The project uses TypeScript, Turbo, and npm scripts, but no security-scanning tools were detected; the repository's active maintenance partly offsets this transparency gap.

Workflow auditcaution

All 21 workflows were analyzed, most use read-only permissions, and no untrusted checkouts or script-injection sinks were found. High-confidence template-injection findings and two adhoc package installs remain workflow-hygiene concerns, while low-confidence GITHUB_ENV findings are not independently decisive.