@types/bonjour

Build provenancecaution

No build attestation or trusted-publisher information is present, which limits publication transparency, though this is not by itself evidence of unhealthy maintenance.

Release historycaution

The package has existed for about 10 years with 13 releases, but it has had no release in the last 12 months and its latest release was over two years ago. This is a maintenance concern, partly offset by the active source project and the stable nature of type definitions.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @types/bonjour, so package ownership is somewhat less transparent. The repository is a known monorepo-style source context, which partly explains the mismatch but does not remove the gap.