@types/stylis

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent than it could be; the active backing repository partly offsets this gap.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was in December 2024; this is a maintenance concern, though the repository remains active.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention it, which creates a package-to-repository attribution concern; the package README explicitly identifies its DefinitelyTyped source, partly compensating for that mismatch.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and there are no untrusted checkouts or script injections. Medium-confidence template-injection findings remain a minor workflow hygiene concern.