@react-aria/searchfield

Build provenancecaution

No build attestation or trusted publisher identity was observed, so consumers have less independently verifiable evidence connecting the published artifact to the source build. The active, organization-backed repository and conventional artifact contents provide compensating health evidence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, which makes direct package ownership less transparent. The organization-backed monorepo context partly compensates, but this remains a caution for provenance clarity.