@jest/test-result

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, reducing publication transparency, although the active organization-owned repository and release history provide meaningful compensating evidence.

Repo bus factorcaution

Although three contributors were active, one contributor made about 96% of recent commits. Organization backing provides some handoff capacity, but the current activity is still unusually concentrated.

Repo package mentioncaution

The repository name differs from the package name, which is ordinary for a monorepo, but the README also does not mention this package, leaving some uncertainty about the package-to-repository link.

Workflow auditcaution

All 11 workflows were analyzed, all 48 action references are pinned, and no untrusted checkout or script injection was found. The high-confidence trusted-publishing finding is a caution because registry credentials may be long-lived, while top-level write permissions are limited to three workflows.