@vanilla-extract/dynamic

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable. This is a transparency gap, not evidence that the release is unsafe.

Release historycaution

The package has 66 releases but none in the last 12 months, which is a maintenance concern. However, the linked repository shows substantial recent activity, partly compensating for the registry gap.

Repo toolingcaution

The project uses established build and test tooling, including TypeScript and Vitest. No security scanning tools were detected, which is a minor process gap but not a standalone health risk.

Security policycaution

The repository has no published security policy, reducing transparency for vulnerability reporting and response.