@mantine/dates

Repo package mentioncaution

The linked repository is an organization monorepo whose name does not match the package and whose README does not mention @mantine/dates; this weakens direct package-to-repository transparency, although the monorepo structure makes the mismatch understandable.

Repo toolingcaution

The project uses established build tools and the package builds through a defined toolchain; no security scanning tools were detected, a modest transparency gap partly offset by the repository security policy.

Workflow auditcaution

All three workflows were analyzed, use read-only permissions, and have no untrusted checkout or script-injection findings. Two of 18 action references are unpinned and one high-confidence low-severity adhoc-packages finding remains, so this is good rather than perfect hygiene.