@types/conventional-commits-parser

Build provenancecaution

No build attestation or trusted-publisher metadata is present, which limits publication transparency but is not by itself evidence of poor maintenance for this registry package.

Repo package mentioncaution

The repository name does not match the package and its main README does not mention it, which creates a small ownership-transparency concern; the package README explicitly points to the relevant DefinitelyTyped path, partly compensating for that gap.