@types/oracledb

Build provenancecaution

No build attestation, trusted publisher identity, or staged publishing is present, leaving release-origin transparency weaker than best practice; this is a caution rather than a severe health failure because other maintenance and artifact signals are strong.

Token permissionscaution

Five workflows declare read-only permissions and none declare top-level write permissions, but two workflows lack top-level permissions declarations, leaving a minor least-privilege gap.