@types/pg-pool

Build provenancecaution

No build attestation or trusted-publisher provenance is present, which limits publication transparency, but this is not by itself evidence of poor maintenance or abandonment.

Repo package mentioncaution

The repository name does not match the package and its main README does not mention @types/pg-pool, creating a provenance clarity concern. The package README explicitly points to the DefinitelyTyped types/pg-pool directory, which partly explains the monorepo layout but does not remove the mismatch.

Workflow auditcaution

All seven workflows were analyzed, action references are fully pinned, and no untrusted checkout, script injection, or top-level write permissions were found. Four medium-confidence template-injection findings are still a workflow-hygiene concern, but no dangerous trigger corroborates them.