← Home

@commercetools-frontend/constants

npm Repository Homepage
29
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tdeekensemmenkocommercetools-admin

Keywords

javascriptfrontendreacttoolkit

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publisher is documented by SLSA provenance attestation; stable for this package going forward. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Babel runtime deps are framework-scoped and loaded by convention; not a real phantom dep for this package. ai
phantom-deps phantom-dep:@babel/runtime-corejs3 AI (phantom-deps): Same as @babel/runtime — framework-scoped convention dep, stable false positive for this package. ai

Versions (showing 29 of 29)

Version Deps Published
27.8.0 2 / 2
27.7.0 2 / 2
27.6.3 2 / 2
27.6.2 2 / 2
27.6.1 2 / 2
27.6.0 2 / 2
27.5.4 2 / 2
27.5.3 2 / 2
27.5.2 2 / 2
27.5.1 2 / 2
27.5.0 2 / 2
27.4.2 2 / 2
27.4.1 2 / 2
27.4.0 2 / 2
27.3.0 2 / 2
27.2.0 2 / 2
27.1.0 2 / 2
27.0.0 2 / 2
26.1.0 2 / 2
26.0.2 2 / 2
26.0.1 2 / 2
26.0.0 2 / 2
25.2.0 2 / 2
25.1.0 2 / 2
25.0.0 2 / 2
24.13.0 2 / 2
24.12.0 2 / 2
24.11.0 2 / 2
24.10.0 2 / 2

v27.8.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v27.7.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.