@mapbox/geojson-types

Build provenancecaution

No build attestation or trusted publisher provenance is reported, leaving publication origin less verifiable; this is a transparency caution rather than evidence of maliciousness.

Licensecaution

A license file is present, but it identifies MIT while the manifest declares ISC; the mismatch creates a real licensing clarity concern.

Release historycaution

The package has had no release in over eight years and none in the last 12 months, which is a meaningful maintenance concern despite its small, stable scope.