← Home

@babel/highlight

Syntax highlight JavaScript strings for output in terminals.

31
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

hzooexistentialismnicolo-ribaudojlhwung

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): nicolo-ribaudo is a known Babel core team member; this is a legitimate maintainer transition within the Babel project, not a compromise. ai
provenance missing-githead AI (provenance): Babel monorepo publish environment changes are routine; missing gitHead is not a security signal for this well-established, trusted package. ai
bogus-package bogus-package AI (bogus-package): @babel/highlight is a legitimate, long-standing Babel monorepo package. The mass-production signal is a false positive from Babel's templated monorepo naming convention. ai
provenance no-provenance AI (provenance): This version predates Sigstore provenance adoption (published 2020); absence of attestation is expected for packages of this era. ai

Versions (showing 31 of 31)

Show 1 prerelease
Version Deps Published
7.25.9 4 / 1
7.25.7 4 / 1
7.24.7 4 / 1
7.24.6 4 / 1
7.24.5 4 / 1
7.24.2 4 / 1
7.24.1 4 / 1
7.23.4 3 / 1
7.22.20 3 / 1
7.22.13 3 / 1
7.22.10 3 / 1
7.22.5 3 / 2
7.18.6 3 / 2
7.17.12 3 / 2
7.17.9 3 / 2
7.16.10 3 / 2
7.16.7 3 / 2
7.16.0 3 / 2
7.14.5 3 / 2
7.14.0 3 / 2
7.13.10 3 / 2
7.13.8 3 / 2
7.12.13 3 / 1
7.10.4 3 / 1
7.10.3 3 / 1
7.10.1 3 / 1
7.9.0 3 / 1
7.8.3 3 / 1
7.8.0 3 / 1
7.5.0 3 / 1
7.0.0 3 / 1