@types/content-disposition

Build provenancecaution

No build attestation or trusted-publisher provenance is present, which is a transparency limitation, but it does not by itself indicate poor maintenance or an unfit release.

Release historycaution

The package is mature, with 10 releases since December 2016, but it had no releases in the last 12 months and its latest release was in June 2025, indicating a slow cadence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some linkage ambiguity; however, the package README explicitly identifies the DefinitelyTyped types path, which partly compensates.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and no untrusted checkout or script-injection paths were found. Four medium-confidence template-injection findings remain hygiene concerns, but no high-severity findings were reported.