@fullstory/browser

Build provenancecaution

The release has no build provenance attestation or trusted-publisher metadata, limiting verification of how the registry artifact was produced.

Repo bus factorcaution

All three recent commits came from one contributor, creating a real continuity risk; the organization-owned project provides some capacity to hand maintenance off.

Repo toolingcaution

The repository uses established TypeScript, Rollup, Babel, and npm tooling, but no security scanning tool was detected, leaving a modest transparency gap.

Security policycaution

No repository security policy was found, reducing disclosure transparency for a browser SDK, though this is a hygiene gap rather than evidence of abandonment.