diff --git a/app/components/Terminal/Install.vue b/app/components/Terminal/Install.vue
index 5fe249ea0..273960c0f 100644
--- a/app/components/Terminal/Install.vue
+++ b/app/components/Terminal/Install.vue
@@ -5,6 +5,7 @@ import type { PackageManagerId } from '~/utils/install-command'
 const props = defineProps<{
   packageName: string
   requestedVersion?: string | null
+  installVersionOverride?: string | null
   jsrInfo?: JsrPackageInfo | null
   typesPackageName?: string | null
   executableInfo?: { hasExecutable: boolean; primaryCommand?: string } | null
@@ -16,6 +17,7 @@ const { selectedPM, showTypesInInstall, copied, copyInstallCommand } = useInstal
   () => props.requestedVersion ?? null,
   () => props.jsrInfo ?? null,
   () => props.typesPackageName ?? null,
+  () => props.installVersionOverride ?? null,
 )
 
 // Generate install command parts for a specific package manager
@@ -23,7 +25,7 @@ function getInstallPartsForPM(pmId: PackageManagerId) {
   return getInstallCommandParts({
     packageName: props.packageName,
     packageManager: pmId,
-    version: props.requestedVersion,
+    version: props.installVersionOverride ?? props.requestedVersion,
     jsrInfo: props.jsrInfo,
   })
 }
diff --git a/app/composables/npm/usePackage.ts b/app/composables/npm/usePackage.ts
index ae99b0afc..dd89412aa 100644
--- a/app/composables/npm/usePackage.ts
+++ b/app/composables/npm/usePackage.ts
@@ -1,9 +1,30 @@
-import type { Packument, SlimPackument, SlimVersion, SlimPackumentVersion } from '#shared/types'
+import type {
+  Packument,
+  SlimPackument,
+  SlimVersion,
+  SlimPackumentVersion,
+  PackumentVersion,
+  PublishTrustLevel,
+} from '#shared/types'
 import { extractInstallScriptsInfo } from '~/utils/install-scripts'
 
 /** Number of recent versions to include in initial payload */
 const RECENT_VERSIONS_COUNT = 5
 
+function hasAttestations(version: PackumentVersion): boolean {
+  return Boolean(version.dist.attestations)
+}
+
+function hasTrustedPublisher(version: PackumentVersion): boolean {
+  return Boolean(version._npmUser?.trustedPublisher)
+}
+
+function getTrustLevel(version: PackumentVersion): PublishTrustLevel {
+  if (hasAttestations(version)) return 'provenance'
+  if (hasTrustedPublisher(version)) return 'trustedPublisher'
+  return 'none'
+}
+
 /**
  * Transform a full Packument into a slimmed version for client-side use.
  * Reduces payload size by:
@@ -11,7 +32,10 @@ const RECENT_VERSIONS_COUNT = 5
  * - Including only: 5 most recent versions + one version per dist-tag + requested version
  * - Stripping unnecessary fields from version objects
  */
-function transformPackument(pkg: Packument, requestedVersion?: string | null): SlimPackument {
+export function transformPackument(
+  pkg: Packument,
+  requestedVersion?: string | null,
+): SlimPackument {
   // Get versions pointed to by dist-tags
   const distTagVersions = new Set(Object.values(pkg['dist-tags'] ?? {}))
 
@@ -34,6 +58,23 @@ function transformPackument(pkg: Packument, requestedVersion?: string | null): S
     includedVersions.add(requestedVersion)
   }
 
+  // Build security metadata for all versions, but only include in payload
+  // when the package has mixed trust levels (i.e. a downgrade could exist)
+  const securityVersionEntries = Object.entries(pkg.versions).map(([version, metadata]) => {
+    const trustLevel = getTrustLevel(metadata)
+    return {
+      version,
+      time: pkg.time[version],
+      hasProvenance: trustLevel !== 'none',
+      trustLevel,
+      deprecated: metadata.deprecated,
+    }
+  })
+
+  const trustLevels = new Set(securityVersionEntries.map(v => v.trustLevel))
+  const hasMixedTrust = trustLevels.size > 1
+  const securityVersions = hasMixedTrust ? securityVersionEntries : undefined
+
   // Build filtered versions object with install scripts info per version
   const filteredVersions: Record<string, SlimVersion> = {}
   let versionData: SlimPackumentVersion | null = null
@@ -51,8 +92,12 @@ function transformPackument(pkg: Packument, requestedVersion?: string | null): S
           installScripts: installScripts ?? undefined,
         }
       }
+      const trustLevel = getTrustLevel(version)
+      const hasProvenance = trustLevel !== 'none'
+
       filteredVersions[v] = {
-        ...((version?.dist as { attestations?: unknown }) ? { hasProvenance: true } : {}),
+        hasProvenance,
+        trustLevel,
         version: version.version,
         deprecated: version.deprecated,
         tags: version.tags as string[],
@@ -90,6 +135,7 @@ function transformPackument(pkg: Packument, requestedVersion?: string | null): S
     'bugs': pkg.bugs,
     'requestedVersion': versionData,
     'versions': filteredVersions,
+    'securityVersions': securityVersions,
   }
 }
 
diff --git a/app/composables/useInstallCommand.ts b/app/composables/useInstallCommand.ts
index 23094d457..827ac89f4 100644
--- a/app/composables/useInstallCommand.ts
+++ b/app/composables/useInstallCommand.ts
@@ -9,6 +9,7 @@ export function useInstallCommand(
   requestedVersion: MaybeRefOrGetter<string | null>,
   jsrInfo: MaybeRefOrGetter<JsrPackageInfo | null>,
   typesPackageName: MaybeRefOrGetter<string | null>,
+  installVersionOverride?: MaybeRefOrGetter<string | null>,
 ) {
   const selectedPM = useSelectedPackageManager()
   const { settings } = useSettings()
@@ -21,10 +22,11 @@ export function useInstallCommand(
   const installCommandParts = computed(() => {
     const name = toValue(packageName)
     if (!name) return []
+    const version = toValue(installVersionOverride) ?? toValue(requestedVersion)
     return getInstallCommandParts({
       packageName: name,
       packageManager: selectedPM.value,
-      version: toValue(requestedVersion),
+      version,
       jsrInfo: toValue(jsrInfo),
     })
   })
@@ -32,10 +34,11 @@ export function useInstallCommand(
   const installCommand = computed(() => {
     const name = toValue(packageName)
     if (!name) return ''
+    const version = toValue(installVersionOverride) ?? toValue(requestedVersion)
     return getInstallCommand({
       packageName: name,
       packageManager: selectedPM.value,
-      version: toValue(requestedVersion),
+      version,
       jsrInfo: toValue(jsrInfo),
     })
   })
diff --git a/app/pages/package/[[org]]/[name].vue b/app/pages/package/[[org]]/[name].vue
index 913c54af3..1722dc0b9 100644
--- a/app/pages/package/[[org]]/[name].vue
+++ b/app/pages/package/[[org]]/[name].vue
@@ -1,6 +1,7 @@
 <script setup lang="ts">
 import type {
   NpmVersionDist,
+  PackageVersionInfo,
   PackumentVersion,
   ProvenanceDetails,
   ReadmeResponse,
@@ -12,6 +13,7 @@ import { joinURL } from 'ufo'
 import { areUrlsEquivalent } from '#shared/utils/url'
 import { isEditableElement } from '~/utils/input'
 import { getDependencyCount } from '~/utils/npm/dependency-count'
+import { detectPublishSecurityDowngradeForVersion } from '~/utils/publish-security'
 import { useModal } from '~/composables/useModal'
 import { useAtproto } from '~/composables/atproto/useAtproto'
 import { togglePackageLike } from '~/utils/atproto/likes'
@@ -143,6 +145,18 @@ const {
   error,
 } = usePackage(packageName, () => resolvedVersion.value ?? requestedVersion.value)
 const displayVersion = computed(() => pkg.value?.requestedVersion ?? null)
+const versionSecurityMetadata = computed<PackageVersionInfo[]>(() => {
+  if (!pkg.value) return []
+  if (pkg.value.securityVersions?.length) return pkg.value.securityVersions
+
+  return Object.entries(pkg.value.versions).map(([version, metadata]) => ({
+    version,
+    time: pkg.value?.time?.[version],
+    hasProvenance: !!metadata.hasProvenance,
+    trustLevel: metadata.trustLevel,
+    deprecated: metadata.deprecated,
+  }))
+})
 
 // Process package description
 const pkgDescription = useMarkdown(() => ({
@@ -225,6 +239,30 @@ const deprecationNoticeMessage = useMarkdown(() => ({
   text: deprecationNotice.value?.message ?? '',
 }))
 
+const publishSecurityDowngrade = computed(() => {
+  const currentVersion = displayVersion.value?.version
+  if (!currentVersion) return null
+  return detectPublishSecurityDowngradeForVersion(versionSecurityMetadata.value, currentVersion)
+})
+
+const installVersionOverride = computed(
+  () => publishSecurityDowngrade.value?.trustedVersion ?? null,
+)
+
+const downgradeFallbackInstallText = computed(() => {
+  const d = publishSecurityDowngrade.value
+  if (!d?.trustedVersion) return null
+  if (d.trustedTrustLevel === 'provenance')
+    return $t('package.security_downgrade.fallback_install_provenance', {
+      version: d.trustedVersion,
+    })
+  if (d.trustedTrustLevel === 'trustedPublisher')
+    return $t('package.security_downgrade.fallback_install_trustedPublisher', {
+      version: d.trustedVersion,
+    })
+  return null
+})
+
 const sizeTooltip = computed(() => {
   const chunks = [
     displayVersion.value &&
@@ -1020,9 +1058,96 @@ onKeyStroke(
           :id="`pm-panel-${activePmId}`"
           :aria-labelledby="`pm-tab-${activePmId}`"
         >
+          <div
+            v-if="publishSecurityDowngrade"
+            role="alert"
+            class="mb-4 rounded-lg border border-amber-600/40 bg-amber-500/10 px-4 py-3 text-amber-700 dark:text-amber-400"
+          >
+            <h3 class="m-0 flex items-center gap-2 font-mono text-sm font-medium">
+              <span class="i-carbon:warning-alt w-4 h-4 shrink-0" aria-hidden="true" />
+              {{ $t('package.security_downgrade.title') }}
+            </h3>
+            <p class="mt-2 mb-0 text-sm">
+              <i18n-t
+                v-if="
+                  publishSecurityDowngrade.downgradedTrustLevel === 'none' &&
+                  publishSecurityDowngrade.trustedTrustLevel === 'provenance'
+                "
+                keypath="package.security_downgrade.description_to_none_provenance"
+                tag="span"
+                scope="global"
+              >
+                <template #provenance>
+                  <a
+                    href="https://docs.npmjs.com/generating-provenance-statements"
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    class="inline-flex items-center gap-1 rounded-sm underline underline-offset-4 decoration-amber-600/60 dark:decoration-amber-400/50 hover:decoration-fg focus-visible:decoration-fg focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/70 transition-colors"
+                    >{{ $t('package.security_downgrade.provenance_link_text')
+                    }}<span class="i-carbon-launch w-3 h-3" aria-hidden="true"
+                  /></a>
+                </template>
+              </i18n-t>
+              <i18n-t
+                v-else-if="
+                  publishSecurityDowngrade.downgradedTrustLevel === 'none' &&
+                  publishSecurityDowngrade.trustedTrustLevel === 'trustedPublisher'
+                "
+                keypath="package.security_downgrade.description_to_none_trustedPublisher"
+                tag="span"
+                scope="global"
+              >
+                <template #trustedPublishing>
+                  <a
+                    href="https://docs.npmjs.com/adding-a-trusted-publisher-to-a-package"
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    class="inline-flex items-center gap-1 rounded-sm underline underline-offset-4 decoration-amber-600/60 dark:decoration-amber-400/50 hover:decoration-fg focus-visible:decoration-fg focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/70 transition-colors"
+                    >{{ $t('package.security_downgrade.trusted_publishing_link_text')
+                    }}<span class="i-carbon-launch w-3 h-3" aria-hidden="true"
+                  /></a>
+                </template>
+              </i18n-t>
+              <i18n-t
+                v-else-if="
+                  publishSecurityDowngrade.downgradedTrustLevel === 'provenance' &&
+                  publishSecurityDowngrade.trustedTrustLevel === 'trustedPublisher'
+                "
+                keypath="package.security_downgrade.description_to_provenance_trustedPublisher"
+                tag="span"
+                scope="global"
+              >
+                <template #provenance>
+                  <a
+                    href="https://docs.npmjs.com/generating-provenance-statements"
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    class="inline-flex items-center gap-1 rounded-sm underline underline-offset-4 decoration-amber-600/60 dark:decoration-amber-400/50 hover:decoration-fg focus-visible:decoration-fg focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/70 transition-colors"
+                    >{{ $t('package.security_downgrade.provenance_link_text')
+                    }}<span class="i-carbon-launch w-3 h-3" aria-hidden="true"
+                  /></a>
+                </template>
+                <template #trustedPublishing>
+                  <a
+                    href="https://docs.npmjs.com/adding-a-trusted-publisher-to-a-package"
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    class="inline-flex items-center gap-1 rounded-sm underline underline-offset-4 decoration-amber-600/60 dark:decoration-amber-400/50 hover:decoration-fg focus-visible:decoration-fg focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/70 transition-colors"
+                    >{{ $t('package.security_downgrade.trusted_publishing_link_text')
+                    }}<span class="i-carbon-launch w-3 h-3" aria-hidden="true"
+                  /></a>
+                </template>
+              </i18n-t>
+              {{ ' ' }}
+              <template v-if="downgradeFallbackInstallText">
+                {{ downgradeFallbackInstallText }}
+              </template>
+            </p>
+          </div>
           <TerminalInstall
             :package-name="pkg.name"
             :requested-version="requestedVersion"
+            :install-version-override="installVersionOverride"
             :jsr-info="jsrInfo"
             :types-package-name="typesPackageName"
             :executable-info="executableInfo"
diff --git a/app/utils/publish-security.ts b/app/utils/publish-security.ts
new file mode 100644
index 000000000..dd3bbfbbc
--- /dev/null
+++ b/app/utils/publish-security.ts
@@ -0,0 +1,123 @@
+import type { PackageVersionInfo, PublishTrustLevel } from '#shared/types'
+import { compare, major } from 'semver'
+
+export interface PublishSecurityDowngrade {
+  downgradedVersion: string
+  downgradedPublishedAt?: string
+  downgradedTrustLevel: PublishTrustLevel
+  /** Recommended trusted version within the same major, if one exists */
+  trustedVersion?: string
+  trustedPublishedAt?: string
+  trustedTrustLevel: PublishTrustLevel
+}
+
+type VersionWithIndex = PackageVersionInfo & {
+  index: number
+  timestamp: number
+  trustRank: number
+  resolvedTrustLevel: PublishTrustLevel
+}
+
+const TRUST_RANK: Record<PublishTrustLevel, number> = {
+  none: 0,
+  provenance: 1,
+  trustedPublisher: 2,
+}
+
+function resolveTrustLevel(version: PackageVersionInfo): PublishTrustLevel {
+  if (version.trustLevel) return version.trustLevel
+  // Fallback for legacy data: hasProvenance only indicates non-'none' trust,
+  // so map it to provenance (the lower rank) to avoid over-ranking
+  return version.hasProvenance ? 'provenance' : 'none'
+}
+
+function toTimestamp(time?: string): number {
+  if (!time) return Number.NaN
+  return Date.parse(time)
+}
+
+function sortByRecency(a: VersionWithIndex, b: VersionWithIndex): number {
+  const aValid = !Number.isNaN(a.timestamp)
+  const bValid = !Number.isNaN(b.timestamp)
+
+  if (!aValid && !bValid) {
+    // Fall back to semver comparison if no valid timestamps
+    const semverOrder = compare(b.version, a.version)
+    if (semverOrder !== 0) return semverOrder
+
+    // If semver is also equal, maintain original order
+    return a.index - b.index
+  }
+
+  if (aValid !== bValid) {
+    return aValid ? -1 : 1
+  }
+
+  return b.timestamp - a.timestamp
+}
+
+/**
+ * Detects a security downgrade for a specific viewed version.
+ * A version is considered downgraded when it has no provenance and
+ * there exists an older trusted release.
+ */
+export function detectPublishSecurityDowngradeForVersion(
+  versions: PackageVersionInfo[],
+  viewedVersion: string,
+): PublishSecurityDowngrade | null {
+  if (versions.length < 2 || !viewedVersion) return null
+
+  const sorted = versions
+    .map((version, index) => {
+      const resolvedTrustLevel = resolveTrustLevel(version)
+      return {
+        ...version,
+        index,
+        timestamp: toTimestamp(version.time),
+        trustRank: TRUST_RANK[resolvedTrustLevel],
+        resolvedTrustLevel,
+      }
+    })
+    .sort(sortByRecency)
+
+  const currentIndex = sorted.findIndex(version => version.version === viewedVersion)
+  if (currentIndex === -1) return null
+
+  const current = sorted[currentIndex]
+  if (!current) return null
+
+  const currentMajor = major(current.version)
+
+  // Find the strongest older version across all majors (for detection)
+  // and the strongest within the same major (for recommendation)
+  let strongestOlderAny: VersionWithIndex | null = null
+  let strongestOlderSameMajor: VersionWithIndex | null = null
+  for (const version of sorted.slice(currentIndex + 1)) {
+    // Skip deprecated versions — recommending a deprecated version is misleading
+    if (version.deprecated) continue
+    if (!strongestOlderAny || version.trustRank > strongestOlderAny.trustRank) {
+      strongestOlderAny = version
+    }
+    if (major(version.version) === currentMajor) {
+      if (!strongestOlderSameMajor || version.trustRank > strongestOlderSameMajor.trustRank) {
+        strongestOlderSameMajor = version
+      }
+    }
+  }
+
+  // Use same-major for recommendation if available, otherwise any-major for detection only
+  const strongestOlder = strongestOlderSameMajor ?? strongestOlderAny
+  if (!strongestOlder || strongestOlder.trustRank <= current.trustRank) return null
+
+  // Only recommend a specific version if it's in the same major
+  const recommendation = strongestOlderSameMajor
+
+  return {
+    downgradedVersion: current.version,
+    downgradedPublishedAt: current.time,
+    downgradedTrustLevel: current.resolvedTrustLevel,
+    trustedVersion: recommendation?.version,
+    trustedPublishedAt: recommendation?.time,
+    trustedTrustLevel: strongestOlder.resolvedTrustLevel,
+  }
+}
diff --git a/i18n/locales/en.json b/i18n/locales/en.json
index f0f28b1c2..0a896e909 100644
--- a/i18n/locales/en.json
+++ b/i18n/locales/en.json
@@ -256,6 +256,16 @@
       "view_more_details": "View more details",
       "error_loading": "Failed to load provenance details"
     },
+    "security_downgrade": {
+      "title": "Trust downgrade",
+      "description_to_none_provenance": "This version was published without {provenance}.",
+      "description_to_none_trustedPublisher": "This version was published without {trustedPublishing}.",
+      "description_to_provenance_trustedPublisher": "This version uses {provenance} but not {trustedPublishing}.",
+      "fallback_install_provenance": "Install commands are pinned to {version}, the last version with provenance.",
+      "fallback_install_trustedPublisher": "Install commands are pinned to {version}, the last version with trusted publishing.",
+      "provenance_link_text": "provenance",
+      "trusted_publishing_link_text": "trusted publishing"
+    },
     "keywords_title": "Keywords",
     "compatibility": "Compatibility",
     "card": {
diff --git a/i18n/schema.json b/i18n/schema.json
index 1b2ffaa8f..609831d9e 100644
--- a/i18n/schema.json
+++ b/i18n/schema.json
@@ -772,6 +772,36 @@
           },
           "additionalProperties": false
         },
+        "security_downgrade": {
+          "type": "object",
+          "properties": {
+            "title": {
+              "type": "string"
+            },
+            "description_to_none_provenance": {
+              "type": "string"
+            },
+            "description_to_none_trustedPublisher": {
+              "type": "string"
+            },
+            "description_to_provenance_trustedPublisher": {
+              "type": "string"
+            },
+            "fallback_install_provenance": {
+              "type": "string"
+            },
+            "fallback_install_trustedPublisher": {
+              "type": "string"
+            },
+            "provenance_link_text": {
+              "type": "string"
+            },
+            "trusted_publishing_link_text": {
+              "type": "string"
+            }
+          },
+          "additionalProperties": false
+        },
         "keywords_title": {
           "type": "string"
         },
diff --git a/lunaria/files/en-GB.json b/lunaria/files/en-GB.json
index 0655549a9..fb1d227ec 100644
--- a/lunaria/files/en-GB.json
+++ b/lunaria/files/en-GB.json
@@ -255,6 +255,16 @@
       "view_more_details": "View more details",
       "error_loading": "Failed to load provenance details"
     },
+    "security_downgrade": {
+      "title": "Trust downgrade",
+      "description_to_none_provenance": "This version was published without {provenance}.",
+      "description_to_none_trustedPublisher": "This version was published without {trustedPublishing}.",
+      "description_to_provenance_trustedPublisher": "This version uses {provenance} but not {trustedPublishing}.",
+      "fallback_install_provenance": "Install commands are pinned to {version}, the last version with provenance.",
+      "fallback_install_trustedPublisher": "Install commands are pinned to {version}, the last version with trusted publishing.",
+      "provenance_link_text": "provenance",
+      "trusted_publishing_link_text": "trusted publishing"
+    },
     "keywords_title": "Keywords",
     "compatibility": "Compatibility",
     "card": {
diff --git a/lunaria/files/en-US.json b/lunaria/files/en-US.json
index 7fb0060ef..52c3a5843 100644
--- a/lunaria/files/en-US.json
+++ b/lunaria/files/en-US.json
@@ -255,6 +255,16 @@
       "view_more_details": "View more details",
       "error_loading": "Failed to load provenance details"
     },
+    "security_downgrade": {
+      "title": "Trust downgrade",
+      "description_to_none_provenance": "This version was published without {provenance}.",
+      "description_to_none_trustedPublisher": "This version was published without {trustedPublishing}.",
+      "description_to_provenance_trustedPublisher": "This version uses {provenance} but not {trustedPublishing}.",
+      "fallback_install_provenance": "Install commands are pinned to {version}, the last version with provenance.",
+      "fallback_install_trustedPublisher": "Install commands are pinned to {version}, the last version with trusted publishing.",
+      "provenance_link_text": "provenance",
+      "trusted_publishing_link_text": "trusted publishing"
+    },
     "keywords_title": "Keywords",
     "compatibility": "Compatibility",
     "card": {
diff --git a/shared/types/npm-registry.ts b/shared/types/npm-registry.ts
index dc1f25f06..0d2ed3492 100644
--- a/shared/types/npm-registry.ts
+++ b/shared/types/npm-registry.ts
@@ -6,16 +6,28 @@
  * @see https://github.com/npm/registry/blob/main/docs/REGISTRY-API.md
  */
 
-import type { Packument as PackumentWithoutLicenseObjects, PackumentVersion } from '@npm/types'
+import type {
+  Packument as PackumentWithoutLicenseObjects,
+  PackumentVersion as PackumentVersionWithoutAttestations,
+  Contact,
+} from '@npm/types'
 import type { ReadmeResponse } from './readme'
 
 // Re-export official npm types for packument/manifest
-export type { PackumentVersion, Manifest, ManifestVersion, PackageJSON } from '@npm/types'
+export type { Manifest, ManifestVersion, PackageJSON } from '@npm/types'
 
-// TODO: Remove this type override when @npm/types fixes the license field typing
-export type Packument = Omit<PackumentWithoutLicenseObjects, 'license'> & {
+type NpmTrustedPublisherEvidence = NpmSearchTrustedPublisher | NpmTrustedPublisher | true
+
+export interface PackumentVersion extends PackumentVersionWithoutAttestations {
+  _npmUser?: Contact & { trustedPublisher?: NpmTrustedPublisherEvidence }
+  dist: PackumentVersionWithoutAttestations['dist'] & { attestations?: NpmVersionAttestations }
+}
+
+export type Packument = Omit<PackumentWithoutLicenseObjects, 'license' | 'versions'> & {
   // Fix for license field being incorrectly typed in @npm/types
+  // TODO: Remove this type override when @npm/types fixes the license field typing
   license?: string | { type: string; url?: string }
+  versions: Record<string, PackumentVersion>
 }
 
 /** Install scripts info (preinstall, install, postinstall) */
@@ -30,8 +42,11 @@ export type SlimPackumentVersion = PackumentVersion & {
   installScripts?: InstallScriptsInfo
 }
 
+export type PublishTrustLevel = 'none' | 'trustedPublisher' | 'provenance'
+
 export type SlimVersion = Pick<SlimPackumentVersion, 'version' | 'deprecated' | 'tags'> & {
-  hasProvenance?: true
+  hasProvenance?: boolean
+  trustLevel?: PublishTrustLevel
 }
 
 /**
@@ -72,6 +87,8 @@ export interface SlimPackument {
   'requestedVersion': SlimPackumentVersion | null
   /** Only includes dist-tag versions (with installScripts info added per version) */
   'versions': Record<string, SlimVersion>
+  /** Lightweight security metadata for all versions */
+  'securityVersions'?: PackageVersionInfo[]
 }
 
 /**
@@ -81,6 +98,7 @@ export interface PackageVersionInfo {
   version: string
   time?: string
   hasProvenance: boolean
+  trustLevel?: PublishTrustLevel
   deprecated?: string
 }
 
diff --git a/test/nuxt/composables/use-install-command.spec.ts b/test/nuxt/composables/use-install-command.spec.ts
index f9307d9b3..579942794 100644
--- a/test/nuxt/composables/use-install-command.spec.ts
+++ b/test/nuxt/composables/use-install-command.spec.ts
@@ -260,6 +260,25 @@ describe('useInstallCommand', () => {
       version.value = '18.2.0'
       expect(installCommand.value).toBe('npm install react@18.2.0')
     })
+
+    it('should prefer installVersionOverride when provided', () => {
+      const requestedVersion = shallowRef<string | null>(null)
+      const installVersionOverride = shallowRef<string | null>('1.0.0')
+
+      const { installCommand } = useInstallCommand(
+        'foo',
+        requestedVersion,
+        null,
+        null,
+        installVersionOverride,
+      )
+
+      expect(installCommand.value).toBe('npm install foo@1.0.0')
+
+      installVersionOverride.value = null
+      requestedVersion.value = '2.0.0'
+      expect(installCommand.value).toBe('npm install foo@2.0.0')
+    })
   })
 
   describe('copyInstallCommand', () => {
diff --git a/test/nuxt/composables/use-package-transform.spec.ts b/test/nuxt/composables/use-package-transform.spec.ts
new file mode 100644
index 000000000..fb709179d
--- /dev/null
+++ b/test/nuxt/composables/use-package-transform.spec.ts
@@ -0,0 +1,265 @@
+import { describe, expect, it } from 'vitest'
+import type { Packument, PackageVersionInfo } from '#shared/types'
+import { transformPackument } from '~/composables/npm/usePackage'
+import { detectPublishSecurityDowngradeForVersion } from '~/utils/publish-security'
+
+function createVersion(version: string, hasAttestations = false): Packument['versions'][string] {
+  return {
+    _id: `foo@${version}`,
+    _npmVersion: '10.0.0',
+    name: 'foo',
+    version,
+    dist: {
+      shasum: version,
+      tarball: `https://registry.npmjs.org/foo/-/foo-${version}.tgz`,
+      signatures: [],
+      ...(hasAttestations
+        ? {
+            attestations: {
+              url: `https://example.test/${version}`,
+              provenance: { predicateType: 'https://slsa.dev/provenance/v1' },
+            },
+          }
+        : {}),
+    },
+  }
+}
+
+function createTrustedPublisherVersion(version: string) {
+  return {
+    ...createVersion(version, false),
+    _npmUser: {
+      name: 'github-actions',
+      email: 'noreply@github.com',
+      trustedPublisher: {
+        id: 'github',
+      },
+    },
+  }
+}
+
+function createTrustedPublisherWithAttestationsVersion(version: string) {
+  return {
+    ...createVersion(version, true),
+    _npmUser: {
+      name: 'github-actions',
+      email: 'noreply@github.com',
+      trustedPublisher: {
+        id: 'github',
+      },
+    },
+  }
+}
+
+function createPackument(
+  versions: Packument['versions'],
+  time: Packument['time'],
+  latest: string,
+): Packument {
+  return {
+    '_id': 'foo',
+    '_rev': '1',
+    'name': 'foo',
+    'dist-tags': { latest },
+    time,
+    versions,
+  }
+}
+
+function toVersionInfos(packument: ReturnType<typeof transformPackument>): PackageVersionInfo[] {
+  return (
+    packument.securityVersions ??
+    Object.entries(packument.versions).map(([version, metadata]) => ({
+      version,
+      time: packument.time[version],
+      hasProvenance: !!metadata.hasProvenance,
+      trustLevel: metadata.trustLevel,
+      deprecated: metadata.deprecated,
+    }))
+  )
+}
+
+describe('transformPackument', () => {
+  it('includes requested old version and preserves provenance on it', () => {
+    const packument = createPackument(
+      {
+        '1.0.0': createVersion('1.0.0', true),
+        '1.0.1': createVersion('1.0.1'),
+        '1.0.2': createVersion('1.0.2'),
+        '1.0.3': createVersion('1.0.3'),
+        '1.0.4': createVersion('1.0.4'),
+        '1.0.5': createVersion('1.0.5'),
+        '1.0.6': createVersion('1.0.6'),
+        '1.0.7': createVersion('1.0.7'),
+      },
+      {
+        'created': '2026-01-01T00:00:00.000Z',
+        'modified': '2026-01-08T00:00:00.000Z',
+        '1.0.0': '2026-01-01T00:00:00.000Z',
+        '1.0.1': '2026-01-02T00:00:00.000Z',
+        '1.0.2': '2026-01-03T00:00:00.000Z',
+        '1.0.3': '2026-01-04T00:00:00.000Z',
+        '1.0.4': '2026-01-05T00:00:00.000Z',
+        '1.0.5': '2026-01-06T00:00:00.000Z',
+        '1.0.6': '2026-01-07T00:00:00.000Z',
+        '1.0.7': '2026-01-08T00:00:00.000Z',
+      },
+      '1.0.7',
+    )
+
+    const transformed = transformPackument(packument, '1.0.0')
+
+    expect(transformed.versions['1.0.0']?.hasProvenance).toBe(true)
+    expect(transformed.versions['1.0.1']).toBeUndefined()
+    expect(transformed.versions['1.0.2']).toBeUndefined()
+    expect(transformed.securityVersions).toHaveLength(8)
+  })
+
+  it('omits securityVersions when all versions have the same trust level', () => {
+    const packument = createPackument(
+      {
+        '1.0.0': createVersion('1.0.0'),
+        '1.0.1': createVersion('1.0.1'),
+        '1.0.2': createVersion('1.0.2'),
+      },
+      {
+        'created': '2026-01-01T00:00:00.000Z',
+        'modified': '2026-01-03T00:00:00.000Z',
+        '1.0.0': '2026-01-01T00:00:00.000Z',
+        '1.0.1': '2026-01-02T00:00:00.000Z',
+        '1.0.2': '2026-01-03T00:00:00.000Z',
+      },
+      '1.0.2',
+    )
+
+    const transformed = transformPackument(packument, '1.0.2')
+
+    // All versions have trustLevel 'none', so no mixed trust — omit the array
+    expect(transformed.securityVersions).toBeUndefined()
+  })
+
+  it('includes securityVersions when package has mixed trust levels', () => {
+    const packument = createPackument(
+      {
+        '1.0.0': createVersion('1.0.0', true),
+        '1.0.1': createVersion('1.0.1'),
+      },
+      {
+        'created': '2026-01-01T00:00:00.000Z',
+        'modified': '2026-01-02T00:00:00.000Z',
+        '1.0.0': '2026-01-01T00:00:00.000Z',
+        '1.0.1': '2026-01-02T00:00:00.000Z',
+      },
+      '1.0.1',
+    )
+
+    const transformed = transformPackument(packument, '1.0.1')
+
+    expect(transformed.securityVersions).toHaveLength(2)
+  })
+
+  it('works with downgrade detection for viewed version', () => {
+    const packument = createPackument(
+      {
+        '1.0.0': createVersion('1.0.0', true),
+        '1.0.1': createVersion('1.0.1'),
+        '1.0.2': createVersion('1.0.2', true),
+      },
+      {
+        'created': '2026-01-01T00:00:00.000Z',
+        'modified': '2026-01-03T00:00:00.000Z',
+        '1.0.0': '2026-01-01T00:00:00.000Z',
+        '1.0.1': '2026-01-02T00:00:00.000Z',
+        '1.0.2': '2026-01-03T00:00:00.000Z',
+      },
+      '1.0.2',
+    )
+
+    const transformed = transformPackument(packument, '1.0.1')
+    const infos = toVersionInfos(transformed)
+
+    expect(detectPublishSecurityDowngradeForVersion(infos, '1.0.2')).toBeNull()
+    expect(detectPublishSecurityDowngradeForVersion(infos, '1.0.1')).toEqual({
+      downgradedVersion: '1.0.1',
+      downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
+      downgradedTrustLevel: 'none',
+      trustedVersion: '1.0.0',
+      trustedPublishedAt: '2026-01-01T00:00:00.000Z',
+      trustedTrustLevel: 'provenance',
+    })
+  })
+
+  it('treats trustedPublisher as trust evidence for downgrade checks', () => {
+    const packument = createPackument(
+      {
+        '1.0.0': createTrustedPublisherVersion('1.0.0'),
+        '1.0.1': createVersion('1.0.1'),
+        '1.0.2': createVersion('1.0.2'),
+      },
+      {
+        'created': '2026-01-01T00:00:00.000Z',
+        'modified': '2026-01-03T00:00:00.000Z',
+        '1.0.0': '2026-01-01T00:00:00.000Z',
+        '1.0.1': '2026-01-02T00:00:00.000Z',
+        '1.0.2': '2026-01-03T00:00:00.000Z',
+      },
+      '1.0.2',
+    )
+
+    const transformed = transformPackument(packument, '1.0.1')
+    const infos = toVersionInfos(transformed)
+
+    expect(infos.find(v => v.version === '1.0.0')?.hasProvenance).toBe(true)
+    expect(detectPublishSecurityDowngradeForVersion(infos, '1.0.1')?.trustedVersion).toBe('1.0.0')
+  })
+
+  it('prefers provenance trust level when both trustedPublisher and attestations exist', () => {
+    const packument = createPackument(
+      {
+        '1.0.0': createTrustedPublisherWithAttestationsVersion('1.0.0'),
+        '1.0.1': createTrustedPublisherVersion('1.0.1'),
+      },
+      {
+        'created': '2026-01-01T00:00:00.000Z',
+        'modified': '2026-01-02T00:00:00.000Z',
+        '1.0.0': '2026-01-01T00:00:00.000Z',
+        '1.0.1': '2026-01-02T00:00:00.000Z',
+      },
+      '1.0.1',
+    )
+
+    const transformed = transformPackument(packument, '1.0.1')
+
+    expect(transformed.versions['1.0.0']?.trustLevel).toBe('provenance')
+  })
+
+  it('flags non-direct downgrade chain until trust is restored', () => {
+    const packument = createPackument(
+      {
+        '2.1.0': createVersion('2.1.0', true),
+        '2.1.1': createVersion('2.1.1'),
+        '2.2.0': createVersion('2.2.0'),
+        '2.3.0': createVersion('2.3.0'),
+        '2.4.0': createVersion('2.4.0', true),
+      },
+      {
+        'created': '2026-01-01T00:00:00.000Z',
+        'modified': '2026-01-05T00:00:00.000Z',
+        '2.1.0': '2026-01-01T00:00:00.000Z',
+        '2.1.1': '2026-01-02T00:00:00.000Z',
+        '2.2.0': '2026-01-03T00:00:00.000Z',
+        '2.3.0': '2026-01-04T00:00:00.000Z',
+        '2.4.0': '2026-01-05T00:00:00.000Z',
+      },
+      '2.4.0',
+    )
+
+    const transformed = transformPackument(packument, '2.3.0')
+    const infos = toVersionInfos(transformed)
+
+    expect(detectPublishSecurityDowngradeForVersion(infos, '2.1.1')?.trustedVersion).toBe('2.1.0')
+    expect(detectPublishSecurityDowngradeForVersion(infos, '2.2.0')?.trustedVersion).toBe('2.1.0')
+    expect(detectPublishSecurityDowngradeForVersion(infos, '2.3.0')?.trustedVersion).toBe('2.1.0')
+    expect(detectPublishSecurityDowngradeForVersion(infos, '2.4.0')).toBeNull()
+  })
+})
diff --git a/test/unit/app/utils/publish-security.spec.ts b/test/unit/app/utils/publish-security.spec.ts
new file mode 100644
index 000000000..dae694701
--- /dev/null
+++ b/test/unit/app/utils/publish-security.spec.ts
@@ -0,0 +1,302 @@
+import { describe, expect, it } from 'vitest'
+import { detectPublishSecurityDowngradeForVersion } from '../../../../app/utils/publish-security'
+
+describe('detectPublishSecurityDowngradeForVersion', () => {
+  const versions = [
+    {
+      version: '1.0.0',
+      time: '2026-01-01T00:00:00.000Z',
+      hasProvenance: true,
+    },
+    {
+      version: '1.0.1',
+      time: '2026-01-02T00:00:00.000Z',
+      hasProvenance: false,
+    },
+    {
+      version: '1.0.2',
+      time: '2026-01-03T00:00:00.000Z',
+      hasProvenance: true,
+    },
+  ]
+
+  it('does not flag trusted viewed version (1.0.2)', () => {
+    const result = detectPublishSecurityDowngradeForVersion(versions, '1.0.2')
+    expect(result).toBeNull()
+  })
+
+  it('flags downgraded viewed version (1.0.1)', () => {
+    const result = detectPublishSecurityDowngradeForVersion(versions, '1.0.1')
+    expect(result).toEqual({
+      downgradedVersion: '1.0.1',
+      downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
+      downgradedTrustLevel: 'none',
+      trustedVersion: '1.0.0',
+      trustedPublishedAt: '2026-01-01T00:00:00.000Z',
+      trustedTrustLevel: 'provenance',
+    })
+  })
+
+  it('flags trust downgrade from trustedPublisher to provenance', () => {
+    const result = detectPublishSecurityDowngradeForVersion(
+      [
+        {
+          version: '1.0.0',
+          time: '2026-01-01T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'trustedPublisher',
+        },
+        {
+          version: '1.0.1',
+          time: '2026-01-02T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'provenance',
+        },
+      ],
+      '1.0.1',
+    )
+
+    expect(result).toEqual({
+      downgradedVersion: '1.0.1',
+      downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
+      downgradedTrustLevel: 'provenance',
+      trustedVersion: '1.0.0',
+      trustedPublishedAt: '2026-01-01T00:00:00.000Z',
+      trustedTrustLevel: 'trustedPublisher',
+    })
+  })
+
+  it('does not flag upgrade from provenance to trustedPublisher', () => {
+    const result = detectPublishSecurityDowngradeForVersion(
+      [
+        {
+          version: '1.0.0',
+          time: '2026-01-01T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'provenance',
+        },
+        {
+          version: '1.0.1',
+          time: '2026-01-02T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'trustedPublisher',
+        },
+      ],
+      '1.0.1',
+    )
+
+    expect(result).toBeNull()
+  })
+
+  it('flags ongoing downgraded versions until an upgrade happens', () => {
+    const versions = [
+      {
+        version: '2.1.0',
+        time: '2026-01-01T00:00:00.000Z',
+        hasProvenance: true,
+        trustLevel: 'provenance' as const,
+      },
+      {
+        version: '2.1.1',
+        time: '2026-01-02T00:00:00.000Z',
+        hasProvenance: false,
+        trustLevel: 'none' as const,
+      },
+      {
+        version: '2.2.0',
+        time: '2026-01-03T00:00:00.000Z',
+        hasProvenance: false,
+        trustLevel: 'none' as const,
+      },
+      {
+        version: '2.3.0',
+        time: '2026-01-04T00:00:00.000Z',
+        hasProvenance: false,
+        trustLevel: 'none' as const,
+      },
+      {
+        version: '2.4.0',
+        time: '2026-01-05T00:00:00.000Z',
+        hasProvenance: true,
+        trustLevel: 'provenance' as const,
+      },
+    ]
+
+    expect(detectPublishSecurityDowngradeForVersion(versions, '2.1.1')?.trustedVersion).toBe(
+      '2.1.0',
+    )
+    expect(detectPublishSecurityDowngradeForVersion(versions, '2.2.0')?.trustedVersion).toBe(
+      '2.1.0',
+    )
+    expect(detectPublishSecurityDowngradeForVersion(versions, '2.3.0')?.trustedVersion).toBe(
+      '2.1.0',
+    )
+    expect(detectPublishSecurityDowngradeForVersion(versions, '2.4.0')).toBeNull()
+  })
+
+  it('skips deprecated versions when selecting trustedVersion', () => {
+    const result = detectPublishSecurityDowngradeForVersion(
+      [
+        {
+          version: '1.0.0',
+          time: '2026-01-01T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'provenance',
+        },
+        {
+          version: '1.0.1',
+          time: '2026-01-02T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'provenance',
+          deprecated: 'Use 1.0.2 instead',
+        },
+        {
+          version: '1.0.2',
+          time: '2026-01-03T00:00:00.000Z',
+          hasProvenance: false,
+          trustLevel: 'none',
+        },
+      ],
+      '1.0.2',
+    )
+
+    // Should recommend 1.0.0 (not 1.0.1 which is deprecated)
+    expect(result?.trustedVersion).toBe('1.0.0')
+  })
+
+  it('returns null when all older trusted versions are deprecated', () => {
+    const result = detectPublishSecurityDowngradeForVersion(
+      [
+        {
+          version: '1.0.0',
+          time: '2026-01-01T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'provenance',
+          deprecated: 'Deprecated',
+        },
+        {
+          version: '1.0.1',
+          time: '2026-01-02T00:00:00.000Z',
+          hasProvenance: false,
+          trustLevel: 'none',
+        },
+      ],
+      '1.0.1',
+    )
+
+    expect(result).toBeNull()
+  })
+
+  it('detects cross-major downgrade but does not recommend a version', () => {
+    const result = detectPublishSecurityDowngradeForVersion(
+      [
+        {
+          version: '1.0.0',
+          time: '2026-01-01T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'provenance',
+        },
+        {
+          version: '2.0.0',
+          time: '2026-01-02T00:00:00.000Z',
+          hasProvenance: false,
+          trustLevel: 'none',
+        },
+      ],
+      '2.0.0',
+    )
+
+    // Downgrade is detected (v1.0.0 was trusted, v2.0.0 is not)
+    expect(result).not.toBeNull()
+    expect(result?.downgradedVersion).toBe('2.0.0')
+    // But no trustedVersion recommendation since v1.0.0 is a different major
+    expect(result?.trustedVersion).toBeUndefined()
+  })
+
+  it('recommends same-major trusted version when cross-major exists', () => {
+    const result = detectPublishSecurityDowngradeForVersion(
+      [
+        {
+          version: '1.0.0',
+          time: '2026-01-01T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'provenance',
+        },
+        {
+          version: '2.0.0',
+          time: '2026-01-02T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'provenance',
+        },
+        {
+          version: '2.1.0',
+          time: '2026-01-03T00:00:00.000Z',
+          hasProvenance: false,
+          trustLevel: 'none',
+        },
+      ],
+      '2.1.0',
+    )
+
+    // Should recommend 2.0.0 (same major), not 1.0.0
+    expect(result?.trustedVersion).toBe('2.0.0')
+  })
+
+  it('uses provenance rank (not trustedPublisher) for hasProvenance fallback without trustLevel', () => {
+    // When trustLevel is absent, hasProvenance: true should map to provenance rank,
+    // not trustedPublisher rank. This means a version with only hasProvenance: true
+    // should be considered a downgrade from trustedPublisher.
+    const result = detectPublishSecurityDowngradeForVersion(
+      [
+        {
+          version: '1.0.0',
+          time: '2026-01-01T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'trustedPublisher',
+        },
+        {
+          version: '1.0.1',
+          time: '2026-01-02T00:00:00.000Z',
+          hasProvenance: true,
+          // no trustLevel — fallback path maps to provenance
+        },
+      ],
+      '1.0.1',
+    )
+
+    // hasProvenance fallback maps to provenance (rank 1), trustedPublisher is rank 2, so this is a downgrade
+    expect(result).toEqual({
+      downgradedVersion: '1.0.1',
+      downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
+      downgradedTrustLevel: 'provenance',
+      trustedVersion: '1.0.0',
+      trustedPublishedAt: '2026-01-01T00:00:00.000Z',
+      trustedTrustLevel: 'trustedPublisher',
+    })
+  })
+
+  it('does not flag hasProvenance fallback against provenance trustLevel', () => {
+    // When trustLevel is absent, hasProvenance: true maps to provenance rank.
+    // An explicit provenance trustLevel is the same rank, so no downgrade.
+    const result = detectPublishSecurityDowngradeForVersion(
+      [
+        {
+          version: '1.0.0',
+          time: '2026-01-01T00:00:00.000Z',
+          hasProvenance: true,
+          // no trustLevel — fallback path maps to provenance
+        },
+        {
+          version: '1.0.1',
+          time: '2026-01-02T00:00:00.000Z',
+          hasProvenance: true,
+          trustLevel: 'provenance',
+        },
+      ],
+      '1.0.1',
+    )
+
+    // Both are provenance rank, so no downgrade
+    expect(result).toBeNull()
+  })
+})