@types/d3-voronoi

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent despite the package’s established project backing.

Release historycaution

The package has had no release in nearly three years, which is a maintenance concern, but the linked DefinitelyTyped project remains actively maintained and type definitions may not need frequent changes.

Repo package mentioncaution

The linked repository does not match the package name and its README does not mention this package, creating some uncertainty about direct package-to-repository traceability; the monorepo context partly explains the mismatch.

Workflow auditcaution

All seven workflows were analyzed with no untrusted checkouts, script injections, or unpinned actions. Medium-confidence template-injection findings remain hygiene concerns, but no dangerous trigger or sink corroborates them.