@types/d3-selection

Build provenancecaution

No build attestation or trusted-publisher provenance is available. This is a transparency gap, but it is moderated by the established organization-backed repository and otherwise strong maintenance evidence.

Token permissionscaution

Five workflows declare read-only permissions and none declare top-level write access. Two workflows lack top-level permissions, leaving a minor configuration gap.