refactor: slightly reword + align styling

Author: danielroe

app/pages/package/[[org]]/[name].vue

@@ -1047,10 +1047,10 @@ onKeyStroke(
           <div
             v-if="publishSecurityDowngrade"
             role="alert"
-            class="mb-4 rounded-lg border border-red-600/40 bg-red-500/10 px-4 py-3 text-red-800 dark:text-red-300"
+            class="mb-4 rounded-lg border border-amber-600/40 bg-amber-500/10 px-4 py-3 text-amber-700 dark:text-amber-400"
           >
-            <h3 class="m-0 flex items-center gap-2 font-mono text-sm font-semibold tracking-wide">
-              <span class="i-carbon-warning-filled w-4 h-4 shrink-0" aria-hidden="true" />
+            <h3 class="m-0 flex items-center gap-2 font-mono text-sm font-medium">
+              <span class="i-carbon:warning-alt w-4 h-4 shrink-0" aria-hidden="true" />
               {{ $t('package.security_downgrade.title') }}
             </h3>
             <p class="mt-2 mb-0 text-sm">
@@ -1063,6 +1063,17 @@ onKeyStroke(
                 })
               }}
             </p>
+            <p class="mt-2 mb-0 text-sm">
+              <a
+                href="https://docs.npmjs.com/generating-provenance-statements"
+                target="_blank"
+                rel="noopener noreferrer"
+                class="inline-flex items-center gap-1 rounded-sm underline underline-offset-4 decoration-amber-600/60 dark:decoration-amber-400/50 hover:decoration-fg focus-visible:decoration-fg focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/70 transition-colors"
+              >
+                {{ $t('package.security_downgrade.learn_more') }}
+                <span class="i-carbon-launch w-3 h-3" aria-hidden="true" />
+              </a>
+            </p>
           </div>
           <TerminalInstall
             :package-name="pkg.name"

i18n/locales/en.json

@@ -256,9 +256,10 @@
       "error_loading": "Failed to load provenance details"
     },
     "security_downgrade": {
-      "title": "Security downgrade detected",
-      "description": "This package has been released using a stronger, more secure publishing method before. The version you are viewing was published using a weaker or less trusted method. Treat this as a potential supply-chain compromise until verified.",
-      "fallback_install": "Install commands below are pinned to trusted version {version} by default."
+      "title": "Provenance downgrade",
+      "description": "An older version of this package was published with provenance or trusted publishing. This version was published without it.",
+      "fallback_install": "Install commands below are pinned to version {version}, which was published with a stronger trust method.",
+      "learn_more": "Learn more about provenance"
     },
     "keywords_title": "Keywords",
     "compatibility": "Compatibility",

lunaria/files/en-GB.json

@@ -256,9 +256,10 @@
       "error_loading": "Failed to load provenance details"
     },
     "security_downgrade": {
-      "title": "Security downgrade detected",
-      "description": "This package has been released using a stronger, more secure publishing method before. The version you are viewing was published using a weaker or less trusted method. Treat this as a potential supply-chain compromise until verified.",
-      "fallback_install": "Install commands below are pinned to trusted version {version} by default."
+      "title": "Provenance downgrade",
+      "description": "An older version of this package was published with provenance or trusted publishing. This version was published without it.",
+      "fallback_install": "Install commands below are pinned to version {version}, which was published with a stronger trust method.",
+      "learn_more": "Learn more about provenance"
     },
     "keywords_title": "Keywords",
     "compatibility": "Compatibility",

lunaria/files/en-US.json

@@ -256,9 +256,10 @@
       "error_loading": "Failed to load provenance details"
     },
     "security_downgrade": {
-      "title": "Security downgrade detected",
-      "description": "This package has been released using a stronger, more secure publishing method before. The version you are viewing was published using a weaker or less trusted method. Treat this as a potential supply-chain compromise until verified.",
-      "fallback_install": "Install commands below are pinned to trusted version {version} by default."
+      "title": "Provenance downgrade",
+      "description": "An older version of this package was published with provenance or trusted publishing. This version was published without it.",
+      "fallback_install": "Install commands below are pinned to version {version}, which was published with a stronger trust method.",
+      "learn_more": "Learn more about provenance"
     },
     "keywords_title": "Keywords",
     "compatibility": "Compatibility",