@temporalio/proto

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable despite the otherwise strong maintenance evidence.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations less transparent than they could be.

Token permissionscaution

All workflows declare permissions, and four use read-only permissions; four also have top-level write permissions, which is a manageable but notable automation exposure.