@types/d3-force

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, which limits release transparency, but this is a modest concern for a small declaration-only artifact.

Release historycaution

The package has 37 releases and a long history, but it has had no release in the past two years. Active repository maintenance partly offsets the stale registry cadence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating some package-to-repository attribution uncertainty. The mismatch is plausible for a DefinitelyTyped monorepo but remains a transparency gap.