Summary by cubic

Refines the tag-tampering scenario in THREATMODEL.md to use generic wording and clarifies mitigations and residual risks around tag-based publishing. Docs-only; no behavior changes.

Description

• Summary of changes
  • Generalized the example by removing a specific tag reference; retained v1.99.99 as the out-of-band example.
  • Tightened Mitigations copy to highlight npm re-publish rejection, provenance attestations, and GitHub tag protection.
  • Simplified Gaps to focus on risk of new malicious versions using a generic v1.x.x placeholder.
• Reasoning
  • Make the threat model version-agnostic and clearer.
  • Reduce ambiguity and keep the residual risk explicit.
• Additional context
  • Only edits to THREATMODEL.md.

Docs

• Updates THREATMODEL.md wording for clarity and consistency; no new docs or migration notes.

Testing

• No tests added or changed; not needed for a docs-only update.

^{Written for commit 1434fce. Summary will update on new commits.}