@clerk/nuxt
Clerk SDK for Nuxt
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): dominic-clerk is a Clerk employee account with 47 approved packages; publisher change from GH Actions to named account is a known Clerk publishing pattern. SLSA provenance attestation further validates CI build integrity. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @clerk/types is a first-party Clerk package from the same monorepo; adding it as a runtime dep is expected and benign for this package. | ai | |
| dependencies | unvetted-dep:@clerk/shared | AI (dependencies): First-party Clerk shared utilities; expected dependency for all Clerk SDKs. | ai | |
| dependencies | unvetted-dep:@nuxt/schema | AI (dependencies): Official Nuxt ecosystem package; expected peer dependency for a Nuxt module. | ai | |
| dependencies | unvetted-dep:@clerk/backend | AI (dependencies): First-party Clerk backend SDK; expected for server-side auth in Nuxt. | ai | |
| dependencies | unvetted-dep:@clerk/vue | AI (dependencies): First-party Clerk SDK dependency; expected for a Clerk Nuxt integration. | ai | |
| typosquat | typosquat.levenshtein:next | AI (typosquat): @clerk/nuxt is the official Clerk SDK for Nuxt.js framework, not a typosquat of 'next'. The scoped package name is intentional and correct for this well-established auth SDK. | ai |
Versions (showing 48 of 48)
| Version | Deps | Published |
|---|---|---|
| 2.6.22 | 5 / 4 | |
| 2.6.21 | 5 / 4 | |
| 2.6.20 | 5 / 4 | |
| 2.6.19 | 5 / 4 | |
| 2.6.18 | 5 / 4 | |
| 2.6.17 | 5 / 4 | |
| 2.6.16 | 5 / 4 | |
| 2.6.15 | 5 / 4 | |
| 2.6.14 | 5 / 4 | |
| 2.6.13 | 5 / 4 | |
| 2.6.12 | 5 / 4 | |
| 2.6.11 | 5 / 4 | |
| 2.6.10 | 5 / 4 | |
| 2.6.9 | 5 / 4 | |
| 2.6.8 | 5 / 4 | |
| 2.6.7 | 5 / 4 | |
| 2.6.6 | 5 / 4 | |
| 2.6.5 | 5 / 4 | |
| 2.6.4 | 5 / 4 | |
| 2.6.3 | 5 / 4 | |
| 2.6.2 | 5 / 4 | |
| 2.6.1 | 5 / 4 | |
| 2.6.0 | 5 / 4 | |
| 2.5.3 | 5 / 4 | |
| 2.5.2 | 5 / 4 | |
| 2.5.1 | 5 / 4 | |
| 2.5.0 | 5 / 4 | |
| 2.4.6 | 5 / 4 | |
| 2.4.5 | 5 / 4 | |
| 2.4.4 | 5 / 4 | |
| 2.4.3 | 5 / 4 | |
| 2.4.2 | 5 / 4 | |
| 2.4.1 | 5 / 4 | |
| 2.4.0 | 5 / 4 | |
| 2.3.0 | 6 / 3 | |
| 2.2.10 | 6 / 3 | |
| 2.2.9 | 6 / 3 | |
| 2.2.8 | 6 / 3 | |
| 2.2.7 | 6 / 3 | |
| 2.2.6 | 6 / 3 | |
| 2.2.5 | 6 / 3 | |
| 2.2.4 | 6 / 3 | |
| 2.2.2 | 6 / 3 | |
| 1.13.32 | 7 / 2 | |
| 1.13.31 | 7 / 2 | |
| 1.13.30 | 7 / 2 | |
| 1.13.29 | 7 / 2 | |
| 1.13.28 | 7 / 2 |
v2.6.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.6.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.13.32
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.