class-variance-authority

Build provenancecaution

The release has no build attestation or trusted-publisher identity. This weakens publication transparency, although the small artifact and linked active project reduce the practical concern.

Release historycaution

The package has 27 releases since January 2022, but none in the last 12 months and the latest registry release was on November 26, 2024. This suggests release activity has paused, although the active repository provides compensating evidence that the project itself is not abandoned.

Security policycaution

No repository security policy was found. This is a transparency gap, though the active maintenance and security scanning provide partial compensation.