@mixpanel/rrweb-types

Build provenancecaution

No build attestation or trusted-publisher provenance is provided, leaving publication origin less independently verifiable; the organization-backed active repository partly compensates.

Lifecycle scriptscaution

The package has a prepublish lifecycle script. This is a mild release-process concern, though it is not evidence of unsafe installation behavior by itself.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the package-to-source relationship is unclear; this is more concerning than an ordinary monorepo subpackage mismatch.

Repo toolingcaution

The repository uses established build and test tooling, though no security-scanning tool was detected; the security policy provides some compensating process evidence.

Version stabilitycaution

The assessed version is a prerelease, and all recent releases are prereleases, so API stability is less certain despite the regular release cadence.