@yarnpkg/esbuild-plugin-pnp

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the origin of the published artifact less independently verifiable.

Release historycaution

The latest release was over four years ago, with no releases in the last 12 months. Its 52-release history shows prior activity but does not offset the current release gap.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the link does not clearly establish package-specific ownership. A monorepo can explain the name mismatch, but the missing README mention remains a caution.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected. The missing scanning coverage is a modest transparency gap.

Version stabilitycaution

Version 3.0.0-rc.15 is a prerelease, and 85% of recent releases were prereleases, so compatibility and support expectations are less settled.