@jest/get-type

Build provenancecaution

The release has no build attestation or trusted-publisher identity, leaving publication provenance less transparent than it could be, although the repository and package otherwise align with an established project.

Repo bus factorcaution

One contributor made 74 of 77 recent commits, creating a genuine concentration risk; the organization backing provides some capacity to hand maintenance off.

Repo package mentioncaution

The repository name differs from the package name, which is normal for a monorepo, but its README neither names @jest/get-type nor matches it directly, leaving some uncertainty that this repository is the package's specific home.

Workflow auditcaution

All 11 workflows were analyzed, all 48 action references are pinned, and no untrusted checkout or script-injection path was found. A high-confidence trusted-publishing finding warrants a modest supply-chain hygiene caution, while top-level write permissions are not dangerous without an untrusted path.