caniuse-db

Build provenancecaution

The release has no build attestation, trusted publisher identity, or staged-publishing evidence, leaving publication provenance less transparent.

Maintainerscaution

Only one registry publisher, fyrd, is listed, which creates publishing concentration; repository activity from seven recent contributors provides partial maintenance support but does not remove that registry risk.

Repo package mentioncaution

The repository name does not match caniuse-db and its README does not mention the package, creating a package-to-source identity concern even though the data-focused README describes the distributed contents.

Repo toolingcaution

No build tools or security-scanning tools were detected, reducing independent evidence about automated build and security quality.

Security policycaution

The repository has no security policy, so vulnerability-reporting and response expectations are not documented.