@sentry/vercel-edge

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable despite the package’s strong repository backing.

Package scaffoldingcaution

The package includes a 1,262-character README, while tests and changelogs are present in the repository; its README explicitly warns that direct use is discouraged because the API may change in non-major releases.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some ownership ambiguity; the organization-backed monorepo context partly explains the mismatch but does not remove the caution.

Workflow auditcaution

All 27 workflows were analyzed with no untrusted checkout or script-injection findings, but 145 of 159 action references are unpinned and high-confidence github-app findings report blanket app-token permissions; the low-confidence cache findings are hygiene only.