postcss-preset-env

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, leaving publication origin less independently verifiable despite the otherwise strong project evidence.

Dependency profilecaution

Seventy-eight runtime dependencies create a substantial maintenance and transitive-risk surface for consumers, although the package's plugin-pack purpose explains much of that breadth.

Repo bus factorcaution

One contributor made 100% of the 436 recent commits, creating a meaningful continuity risk; organization ownership provides some capacity to hand off maintenance but does not remove the concentration.