@types/better-sqlite3

Build provenancecaution

No registry build attestation or trusted-publisher identity is present, so publication provenance is less independently verifiable; this is a transparency limitation rather than evidence that the release is unsafe.

Token permissionscaution

Five workflows declare read-only permissions and none declare top-level write permissions. Two workflows omit top-level permissions, leaving a modest workflow-hardening gap.