← Home

@automattic/jetpack-components

Jetpack Components Package

88
Versions
GPL-2.0-or-later
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

macbreyuliyanmjangdamatticbota8cbloweryehg_sgomestyxlasaroshaganejclovrencicsirbrilligchriszaraterobersongomesjohngodleyjehervedaledupreez-a8ct2dw4tluismulinariandrea-sdlelazzabifmfernandessirrealwwachihsuanmanzoorwanijkmsurdi-a8cnewspack-npmdsmartgkthai15bgrgicakrobertsreberski_a8cartpigmjuhaszborkwebkat3samsinbrunobastodhenridevmrmurphywpvip-botetobiesenalshakeroarthur791004diliritymehmoodaknatalia.vidalivan.ottingeranandnalyaarcangelinisretrofoxiamchughmayanksimisonfredrikekelundchriskmndsoandregalgalatanovidiukangzj_mirka_aduthebuccelli

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Framework-scoped package loaded by convention; stable pattern for this package. ai
phantom-deps phantom-dep:@wordpress/theme AI (phantom-deps): Config-file reference; newly added as runtime dep and expected for WordPress integration. ai
phantom-deps phantom-dep:@automattic/format-currency AI (phantom-deps): Same-org scope; loaded by convention in Automattic packages. ai
phantom-deps phantom-dep:@wordpress/browserslist-config AI (phantom-deps): Config-file reference; stable pattern for build tooling. ai

Versions (showing 88 of 88)

Version Deps Published
2.0.1 26 / 21
2.0.0 26 / 21
1.12.17 27 / 22
1.12.16 27 / 22
1.12.14 27 / 22
1.12.13 27 / 22
1.12.12 27 / 23
1.12.11 27 / 23
1.12.10 27 / 23
1.12.9 27 / 23
1.12.8 27 / 23
1.12.7 27 / 23
1.12.6 27 / 23
1.12.5 27 / 23
1.12.4 27 / 23
1.12.3 27 / 23
1.12.2 27 / 23
1.12.1 27 / 23
1.12.0 27 / 23
1.11.3 27 / 23
1.11.2 27 / 23
1.11.1 27 / 23
1.11.0 27 / 23
1.10.0 25 / 23
1.9.0 25 / 23
1.8.3 25 / 23
1.8.2 25 / 23
1.8.1 25 / 23
1.8.0 25 / 23
1.7.0 23 / 23
1.6.1 23 / 23
1.6.0 23 / 22
1.5.0 23 / 22
1.4.16 22 / 22
1.4.15 22 / 22
1.4.14 22 / 22
1.4.13 22 / 22
1.4.12 22 / 22
1.4.11 22 / 22
1.4.10 22 / 22
1.4.9 22 / 22
1.4.8 22 / 22
1.4.7 22 / 22
1.4.6 22 / 22
1.4.5 22 / 22
1.4.4 22 / 23
1.4.3 22 / 23
1.4.2 22 / 23
1.4.1 22 / 23
1.4.0 22 / 23
1.3.13 22 / 23
1.3.12 22 / 23
1.3.11 22 / 23
1.3.10 22 / 23
1.3.9 22 / 23
1.3.8 22 / 23
1.3.7 22 / 23
1.3.6 22 / 23
1.3.5 22 / 23
1.3.4 22 / 23
1.3.3 22 / 23
1.3.2 22 / 23
1.3.1 22 / 23
1.3.0 22 / 23
1.2.2 22 / 23
1.2.1 22 / 23
1.2.0 22 / 23
1.1.19 22 / 23
1.1.18 22 / 23
1.1.17 22 / 23
1.1.16 22 / 23
1.1.15 22 / 23
1.1.14 22 / 23
1.1.13 22 / 23
1.1.12 22 / 24
1.1.11 22 / 24
1.1.10 22 / 24
1.1.9 22 / 24
1.1.8 22 / 24
1.1.7 22 / 24
1.1.6 22 / 24
1.1.5 22 / 24
1.1.4 22 / 24
1.1.3 22 / 24
1.1.2 22 / 24
1.1.1 22 / 24
1.1.0 22 / 24
1.0.0 22 / 24

v2.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.12.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.12.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.12.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.