@types/faker

Registry deprecationdanger

The package is deprecated at package scope, with npm explicitly stating that faker provides its own type definitions and this package is unnecessary. That makes adopting this release unsuitable even though the deprecation is not a malware finding.

Build provenancecaution

No build attestation or trusted publisher information was provided. This is a transparency limitation, but it is secondary to the explicit package deprecation and does not independently establish that the release is unsafe.

Package file treecaution

The artifact contains only LICENSE, README.md, and package.json, confirming that it is a minimal stub rather than an independently maintained implementation. This reinforces the deprecation concern.

Release historycaution

The package has 56 releases since 2016, but its latest release was nearly two years ago and there were no releases in the last 12 months. This is consistent with the package being retired after faker incorporated its own types.