@firebase/app-check-types

Build provenancecaution

No build attestation or trusted-publisher identity is provided, leaving release-origin transparency weaker than it could be, although the active source project provides compensating maintenance evidence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @firebase/app-check-types, which creates some uncertainty about package-to-repository correspondence; the organization-backed monorepo context partly offsets that concern.

Repo toolingcaution

The repository uses established build tools including TypeScript, Rollup, Webpack, Babel, and Nx, but no security-scanning tools were detected, leaving a modest tooling gap.

Version stabilitycaution

Version 0.5.5 is not marked prerelease, but 90% of recent releases are prereleases and the package remains below major version 1, so direct consumers should expect a less stable API.