wasm-feature-detect

Build provenancecaution

The release has no build provenance attestation or trusted-publisher record, so consumers cannot independently verify how the published artifact was produced; the clean package structure partly offsets this gap but does not remove it.

Repo toolingcaution

The repository uses Rollup and npm build scripts, showing an established build process, but it reports no security scanning tools, leaving a modest assurance gap.

Security policycaution

No security policy was found in the repository, reducing transparency about vulnerability reporting and response expectations.