@types/node-cron

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, leaving publication origin less transparent. This is a moderate transparency gap rather than evidence that the release is unsafe.

Release historycaution

The package has existed since January 2018 with 22 releases, but it had no releases in the last 12 months and its latest release was November 2023. That is a meaningful freshness concern for type definitions.

Workflow auditcaution

All seven workflows were analyzed with no untrusted checkouts, script injections, high-severity findings, or unpinned action references; five use read-only permissions. Four medium-confidence template-injection findings in CI remain a workflow-hygiene concern, but no dangerous trigger or credential exposure corroborates them.