@firebase/analytics-compat

Build provenancecaution

No build attestation or trusted publisher provenance is available, leaving publication-to-source integrity less transparent; the active repository and release history provide maintenance evidence but do not replace provenance.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention @firebase/analytics-compat, creating a transparency concern under this signal; however, the organization-backed Firebase monorepo structure and the package's compatibility-layer description provide meaningful context for a subpackage layout.

Repo toolingcaution

The repository uses established build tools including TypeScript, Rollup, Webpack, Babel, and Nx, but no security scanning tools were detected, leaving a modest security-process gap.

Version stabilitycaution

The assessed version is not a prerelease, but 75% of recent releases were prereleases and the package remains below a stable major version, which introduces some API-maturity uncertainty.