@anolilab/semantic-release-preset
Semantic-release predefined presets.
30
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
prisis
Keywords
anolilabsemantic-releasesemantic-release-configsemantic-release-presetpresetconfigconfigurationtemplatesetupboilerplatechangelogpublishreleasenpmpnpmyarngithubgitconventional-commitsconventional-changelogautomationcicdcontinuous-integrationversioning@anolilab/semantic-release-pnpm@semantic-release/changelog@semantic-release/commit-analyzer@semantic-release/exec@semantic-release/git@semantic-release/github@semantic-release/npm@semantic-release/release-notes-generator
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Package uses provenance:true and GitHub Actions CI publishing; publisher change from human to GHA is the intended automated release pattern. | ai | |
| phantom-deps | phantom-dep:@semantic-release/exec | AI (phantom-deps): Semantic-release preset; plugins are loaded by the framework at runtime, not imported directly. | ai | |
| phantom-deps | phantom-dep:@semantic-release/github | AI (phantom-deps): Semantic-release preset; plugins are loaded by the framework at runtime, not imported directly. | ai | |
| phantom-deps | phantom-dep:@semantic-release/changelog | AI (phantom-deps): Semantic-release preset; plugins are loaded by the framework at runtime, not imported directly. | ai | |
| phantom-deps | phantom-dep:@semantic-release/git | AI (phantom-deps): Semantic-release preset; plugins are loaded by the framework at runtime, not imported directly. | ai | |
| phantom-deps | phantom-dep:@semantic-release/release-notes-generator | AI (phantom-deps): Semantic-release preset; plugins are loaded by the framework at runtime, not imported directly. | ai | |
| phantom-deps | phantom-dep:conventional-changelog-conventionalcommits | AI (phantom-deps): Semantic-release preset; plugins are loaded by the framework at runtime, not imported directly. | ai | |
| phantom-deps | phantom-dep:@anolilab/semantic-release-clean-package-json | AI (phantom-deps): Same-org plugin loaded at runtime by semantic-release, not directly imported. | ai | |
| phantom-deps | phantom-dep:@semantic-release/commit-analyzer | AI (phantom-deps): Semantic-release preset; plugins are loaded by the framework at runtime, not imported directly. | ai |
Versions (showing 30 of 30)
| Version | Deps | Published |
|---|---|---|
| 13.4.18 | 8 / 0 | |
| 13.4.17 | 8 / 0 | |
| 13.4.16 | 8 / 0 | |
| 13.4.15 | 8 / 0 | |
| 13.4.14 | 8 / 0 | |
| 13.4.13 | 8 / 0 | |
| 13.4.12 | 8 / 0 | |
| 13.4.11 | 8 / 0 | |
| 13.4.10 | 8 / 0 | |
| 13.4.9 | 8 / 0 | |
| 13.4.8 | 8 / 0 | |
| 13.4.7 | 8 / 0 | |
| 13.4.6 | 8 / 0 | |
| 13.4.5 | 8 / 0 | |
| 13.4.4 | 8 / 0 | |
| 13.4.3 | 8 / 0 | |
| 13.4.2 | 8 / 0 | |
| 13.4.1 | 8 / 0 | |
| 13.4.0 | 8 / 0 | |
| 13.3.0 | 8 / 0 | |
| 13.2.0 | 8 / 0 | |
| 13.1.1 | 8 / 0 | |
| 13.1.0 | 8 / 0 | |
| 13.0.0 | 8 / 0 | |
| 12.1.2 | 8 / 0 | |
| 12.1.1 | 8 / 0 | |
| 12.1.0 | 8 / 0 | |
| 12.0.1 | 8 / 0 | |
| 12.0.0 | 8 / 0 | |
| 11.0.5 | 8 / 0 |
v13.4.18
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.