react-compiler-runtime

Build provenancecaution

No build attestation or trusted-publisher identity was recorded, leaving release provenance less independently verifiable even though the repository shows active build and release workflows.

Repo package mentioncaution

The repository name does not match the package and its README does not mention react-compiler-runtime, so the package-to-source relationship is less transparent; this is somewhat mitigated by the repository's organization backing and the package's focused README.