GitHub actions says a provenance was created, but the "Score" tab says otherwise

[JonathanWilbur]

Hello. For my package, @wildboar/presentation-address@1.0.0, I see in CI that a transparency log entry was created:

npm warn exec The following package was not found and will be installed: jsr@0.14.3
Downloading JSR release binary...
Download completed
(node:2413) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
(Use `node --trace-deprecation ...` to show where the warning was created)
Warning Publishing a library with slow types is not recommended. This may lead to poor type checking performance for users of your package, may affect the quality of automatic documentation generation, and your package will not be shipped with a .d.ts file for Node.js users.
Publishing @wildboar/presentation-address@1.0.0 ...
Provenance transparency log available at https://search.sigstore.dev/?logIndex=2285584307
Successfully published @wildboar/presentation-address@1.0.0
Visit https://jsr.io/@wildboar/presentation-address@1.0.0 for details
Completed in 7s

What would cause this?

[JonathanWilbur]

This is the project in the monorepo: https://github.com/Wildboar-Software/asn1-typescript-libraries/tree/master/packages/presentation-address

This is the GHA workflow: https://github.com/Wildboar-Software/asn1-typescript-libraries/blob/master/.github/workflows/publish.yml

[KnorpelSenf]

See #1474