@clerk/nuxt
Clerk SDK for Nuxt
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): dominic-clerk is a Clerk employee account with 47 approved packages; publisher change from GH Actions to named account is a known Clerk publishing pattern. SLSA provenance attestation further validates CI build integrity. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @clerk/types is a first-party Clerk package from the same monorepo; adding it as a runtime dep is expected and benign for this package. | ai | |
| dependencies | unvetted-dep:@clerk/shared | AI (dependencies): First-party Clerk shared utilities; expected dependency for all Clerk SDKs. | ai | |
| dependencies | unvetted-dep:@nuxt/schema | AI (dependencies): Official Nuxt ecosystem package; expected peer dependency for a Nuxt module. | ai | |
| dependencies | unvetted-dep:@clerk/backend | AI (dependencies): First-party Clerk backend SDK; expected for server-side auth in Nuxt. | ai | |
| dependencies | unvetted-dep:@clerk/vue | AI (dependencies): First-party Clerk SDK dependency; expected for a Clerk Nuxt integration. | ai | |
| typosquat | typosquat.levenshtein:next | AI (typosquat): @clerk/nuxt is the official Clerk SDK for Nuxt.js framework, not a typosquat of 'next'. The scoped package name is intentional and correct for this well-established auth SDK. | ai |
Versions (showing 24 of 24)
| Version | Deps | Published |
|---|---|---|
| 2.5.3 | 5 / 4 | |
| 2.5.2 | 5 / 4 | |
| 2.5.1 | 5 / 4 | |
| 2.5.0 | 5 / 4 | |
| 2.4.6 | 5 / 4 | |
| 2.4.5 | 5 / 4 | |
| 2.4.4 | 5 / 4 | |
| 2.4.3 | 5 / 4 | |
| 2.4.2 | 5 / 4 | |
| 2.4.1 | 5 / 4 | |
| 2.4.0 | 5 / 4 | |
| 2.3.0 | 6 / 3 | |
| 2.2.10 | 6 / 3 | |
| 2.2.9 | 6 / 3 | |
| 2.2.8 | 6 / 3 | |
| 2.2.7 | 6 / 3 | |
| 2.2.6 | 6 / 3 | |
| 2.2.5 | 6 / 3 | |
| 2.2.4 | 6 / 3 | |
| 2.2.2 | 6 / 3 | |
| 1.13.31 | 7 / 2 | |
| 1.13.30 | 7 / 2 | |
| 1.13.29 | 7 / 2 | |
| 1.13.28 | 7 / 2 |
v2.5.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.3.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.2.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.2.8
2 findingsPackage name '@clerk/nuxt' is 1 edit(s) away from popular package 'next'.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.2.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.2.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.2.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.2.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.2.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.13.31
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.13.30
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.13.29
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.13.28
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.