← Home

@cichol/eslint-config

npm Repository Homepage

An universal ESLint configuration for personal projects.

12
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

cichol

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require loads ESLint rule paths — standard pattern for ESLint config packages; stable across versions. ai
phantom-deps phantom-dep:eslint-plugin-react AI (phantom-deps): Declared as a real dependency; referenced via ESLint config resolution, not direct JS import. ai
phantom-deps phantom-dep:eslint-config-airbnb AI (phantom-deps): Declared as a real dependency; referenced via ESLint config resolution, not direct JS import. ai
phantom-deps phantom-dep:eslint-plugin-import AI (phantom-deps): Declared as a real dependency; referenced via ESLint config resolution, not direct JS import. ai
phantom-deps phantom-dep:eslint-plugin-jsx-a11y AI (phantom-deps): Declared as a real dependency; referenced via ESLint config resolution, not direct JS import. ai
phantom-deps phantom-dep:eslint-import-resolver-typescript AI (phantom-deps): Declared as a real dependency; referenced via ESLint config resolution, not direct JS import. ai

Versions (showing 12 of 12)

Version Deps Published
6.1.3 15 / 0
6.1.2 15 / 0
6.1.1 15 / 0
6.1.0 15 / 0
6.0.1 15 / 0
6.0.0 15 / 0
5.4.5 15 / 0
5.4.4 15 / 0
5.4.3 15 / 0
5.4.2 15 / 0
5.4.1 15 / 0
5.4.0 15 / 0

v6.1.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.1.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.4.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.4.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.4.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.4.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.