@microsoft/applicationinsights-shims

Build provenancecaution

No build attestation or trusted-publishing provenance is reported, leaving the release origin less independently verifiable. This is a transparency gap, but it is offset by the established organization-backed repository and active project tooling.

Release historycaution

The registry shows no releases in the last 12 months and the latest release was in April 2023, which is a maintenance concern. However, the linked repository shows recent commit and issue activity, partly compensating for the registry gap.

Workflow auditcaution

All seven workflows were analyzed successfully and all 18 action references are pinned, with no untrusted checkouts or script injection findings. Several workflows use top-level write permissions and high-confidence findings show packages installed outside a lockfile, creating a moderate workflow-hygiene concern; the low-confidence cache findings do not materially change the assessment.