workbox-window

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, which limits publication transparency, though other repository and release evidence supports the project.

Release historycaution

The package has existed for more than 7 years with 62 releases and a historical median interval of about 17 days, but only two releases arrived in the last 12 months, indicating slower recent publishing.

Repo package mentioncaution

The repository name does not match workbox-window and its README does not mention the package, so the package-to-repository association is less transparent; the broader repository file tree does show a Workbox monorepo structure, which partly explains the mismatch.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.