@mapbox/unitbezier

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, leaving publication origin less transparent than it could be, although this is not evidence of a bad release by itself.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, which is a maintenance concern, but it is partly offset by the May 2026 release and June repository push.

Repo toolingcaution

The repository reports no build tool and no security-scanning tool; this is a modest transparency and maintenance gap for release validation.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its two action references are unpinned, reducing build reproducibility.