← Home

@aurodesignsystem/auro-config

npm Repository Homepage

This package contains the shared configuration for the development tools used by Auro.

4
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

capsule42dale.sandeblackfalconbraven112jordanjones243dougalaskarmenner-aa

Keywords

alaska airlinesaurodesign systemconfigs

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:stylelint AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:lint-staged AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:@biomejs/biome AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:stylelint-scss AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:@commitlint/cli AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:stylelint-order AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:semantic-release AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:@semantic-release/git AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:@semantic-release/npm AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:stylelint-config-standard AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:@semantic-release/changelog AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:stylelint-config-standard-scss AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:@commitlint/config-conventional AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
phantom-deps phantom-dep:stylelint-config-idiomatic-order AI (phantom-deps): Config-only package; deps are referenced in exported config files, not imported as JS modules. ai
dependencies unvetted-dep:stylelint-config-idiomatic-order AI (dependencies): Well-known stylelint ordering plugin; appropriate for a shared config package. ai

Versions (showing 4 of 4)

Version Deps Published
1.3.1 14 / 1
1.3.0 14 / 1
1.2.0 0 / 9
1.1.0 0 / 9

v1.3.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.3.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.