@types/use-sync-external-store

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, leaving publication transparency less strong than it could be; this is a caution rather than a health verdict because other repository and package signals are strong.

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in its README, which creates a transparency concern that the repository association is indirect; the monorepo context makes this less severe but does not eliminate the gap.