@types/source-map-support

Build provenancecaution

No build attestation or trusted-publisher identity is recorded, leaving release provenance less independently verifiable even though the source repository and organizational backing are clear.

Release historycaution

The package has 25 releases since 2016 but none in the last 12 months, which is a maintenance concern; however, the linked project remains actively maintained.

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in the repository README, creating a provenance concern; the package README does identify its DefinitelyTyped subdirectory, which partly explains the monorepo relationship.