@ckeditor/ckeditor5-dev-utils
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:postcss-loader | AI (phantom-deps): PostCSS loader referenced in config generation code, not directly imported. | ai | |
| phantom-deps | phantom-dep:@types/postcss-import | AI (phantom-deps): Type-only package loaded by convention; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:raw-loader | AI (phantom-deps): Webpack loader declared and used in build configs; stable for build-tool packages. | ai | |
| phantom-deps | phantom-dep:babel-loader | AI (phantom-deps): Webpack loader declared and used in build configs; stable for build-tool packages. | ai | |
| phantom-deps | phantom-dep:mocha | AI (phantom-deps): Test framework declared and used in test configs; stable pattern for dev-utils. | ai | |
| phantom-deps | phantom-dep:esbuild-loader | AI (phantom-deps): Webpack loader declared and used in build configs; stable for build-tool packages. | ai | |
| phantom-deps | phantom-dep:@types/through2 | AI (phantom-deps): TypeScript types for through2; convention-loaded by framework; stable for this package. | ai | |
| phantom-deps | phantom-dep:style-loader | AI (phantom-deps): Webpack loader declared and used in build configs; stable for build-tool packages. | ai | |
| phantom-deps | phantom-dep:css-loader | AI (phantom-deps): Webpack loader declared and used in build configs; stable for build-tool packages. | ai |
Versions (showing 45 of 45)
| Version | Deps | Published |
|---|---|---|
| 57.4.0 | 11 / 0 | |
| 57.3.0 | 11 / 0 | |
| 57.2.0 | 11 / 0 | |
| 57.1.0 | 11 / 0 | |
| 57.0.0 | 11 / 0 | |
| 56.6.0 | 18 / 0 | |
| 56.5.0 | 18 / 0 | |
| 56.4.0 | 18 / 0 | |
| 56.3.0 | 18 / 0 | |
| 56.2.1 | 18 / 0 | |
| 56.2.0 | 18 / 0 | |
| 56.1.0 | 18 / 0 | |
| 56.0.0 | 18 / 0 | |
| 55.6.3 | 17 / 0 | |
| 55.6.2 | 17 / 0 | |
| 55.6.1 | 17 / 0 | |
| 55.6.0 | 18 / 0 | |
| 55.5.0 | 18 / 0 | |
| 55.4.0 | 18 / 0 | |
| 55.3.1 | 18 / 0 | |
| 55.3.0 | 18 / 0 | |
| 55.2.0 | 18 / 0 | |
| 55.1.1 | 18 / 0 | |
| 55.1.0 | 18 / 0 | |
| 55.0.0 | 18 / 0 | |
| 54.8.0 | 26 / 0 | |
| 54.7.4 | 26 / 0 | |
| 54.7.3 | 26 / 0 | |
| 54.7.2 | 26 / 0 | |
| 54.7.1 | 26 / 0 | |
| 54.7.0 | 26 / 0 | |
| 54.6.1 | 26 / 0 | |
| 54.6.0 | 26 / 0 | |
| 54.5.0 | 26 / 0 | |
| 54.4.0 | 26 / 0 | |
| 54.3.4 | 26 / 0 | |
| 54.3.3 | 26 / 0 | |
| 54.3.2 | 26 / 0 | |
| 54.3.1 | 26 / 0 | |
| 54.3.0 | 26 / 0 | |
| 54.2.3 | 26 / 0 | |
| 54.2.2 | 26 / 0 | |
| 54.2.1 | 26 / 0 | |
| 54.2.0 | 26 / 0 | |
| 54.1.0 | 26 / 0 |
v57.4.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v57.3.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v57.2.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v57.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v57.0.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v56.6.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v54.8.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v54.7.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.