workbox-precaching

Build provenancecaution

No build attestation or trusted-publisher provenance is present, limiting publication transparency, although the repository, release notes, and active project backing provide compensating evidence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention workbox-precaching, creating some uncertainty about package-to-repository alignment; the package's monorepo-style file tree partly explains the mismatch.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting guidance unclear; active security tooling partly offsets this transparency gap.