@types/google.accounts

Build provenancecaution

No build attestation or trusted-publisher provenance is reported. This limits publication transparency, but it is not severe enough to outweigh the active project evidence.

Release historycaution

The package has 19 releases and a roughly 33-day median interval, but it has had no release in the last 12 months; the active source repository partly compensates for this package-specific release gap.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating a provenance-clarity concern. The package README does identify the relevant DefinitelyTyped subdirectory, which partly explains the monorepo mismatch.

Version stabilitycaution

Version 0.0.18 is not a stable-major release, but it is not a prerelease and recent releases show no prerelease activity. This is a modest maturity limitation rather than an abandonment signal.

Workflow auditcaution

All seven workflows were analyzed successfully; all 25 action references are pinned, permissions are read-only or job-scoped, and there are no untrusted checkouts or script injections. Four medium-confidence template-injection findings remain hygiene concerns.