@clerk/chrome-extension
Clerk SDK for Chrome extensions
10
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
colinclerkbradenclerknikosdouvlisjescalanbrkalow-clerkdominic-clerk
Keywords
authauthenticationpasswordlesssessionjwtchromeextension
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Both nikosdouvlis and dominic-clerk are Clerk org accounts; SLSA provenance attestation confirms CI/CD build integrity. Internal maintainer rotation, not a takeover. | ai | |
| dependencies | unvetted-dep:@clerk/clerk-react | AI (dependencies): @clerk/clerk-react is a core Clerk SDK dependency; expected and legitimate for this Chrome extension package across all versions. | ai | |
| dependencies | unvetted-dep:webextension-polyfill | AI (dependencies): webextension-polyfill is the official Mozilla WebExtensions API polyfill, a standard and legitimate dependency for any browser extension package. Stable false positive for @clerk/chrome-extension. | ai | |
| provenance | slsa-provenance | AI (provenance): Clerk publishes via CI/CD with SLSA provenance attestation consistently; this is a stable positive signal for this package. | ai |