@types/nlcst

Build provenancecaution

No build attestation or trusted-publisher provenance is available, which limits publication transparency. However, the package is linked to a large, active organization-backed repository, partially offsetting this gap.

Release historycaution

There have been 9 releases since August 2021, but none in the last three years; the last release was in November 2023. This is a maintenance caution, although type-definition packages can remain stable when the underlying API changes slowly.

Token permissionscaution

Five workflows declare read-only permissions and none declare top-level write permissions. Two workflows lack top-level permissions, leaving a modest configuration transparency gap but no demonstrated excessive write access.