@types/trusted-types

Build provenancecaution

No build attestation or trusted-publisher information is present, leaving publication provenance less transparent. This is a modest gap rather than a severe health risk because other project evidence is strong.

Release historycaution

The package has had no release in nearly three years, which creates some uncertainty about freshness. Its long history and the actively maintained backing repository partly compensate for that gap.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating a provenance clarity concern. The package README does explicitly identify the DefinitelyTyped path for these definitions, which partly compensates.