vscode-languageserver-types

Build provenancecaution

No build attestation or trusted-publisher identity was reported, leaving artifact origin less independently verifiable. The active organization-backed repository and matching package content provide useful compensating context.

Repo toolingcaution

The project uses TypeScript, webpack, and npm build tooling, but no security-scanning tools were detected. That is a transparency and hygiene gap rather than evidence of abandonment.