Provenance badges are not reliably shown on the list of user's packages

[wojtekmaj]

https://npmx.dev/~wojtekmaj?sort=updated

My date-utils packages seem to lack provenance:

But clicking on it reveals that's not the case:

[wojtekmaj]

Interesting: On the results page, some of my packages have me as a publisher, and some have GitHub actions as publisher:

And this is why provenance badge is shown or not.

BUT on the package page we use version.dist.attestations presence to determine whether to show the badge or not, and that seems to be more reliable, in turn lacking provider name:

[serhalp]

any chance this addresses it? #436 (disclaimer: I haven't read through it; it just seems very related)

[wojtekmaj]

@serhalp Nope, it does not.