← Home

@commercetools-frontend/i18n

29
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tdeekensemmenkocommercetools-admin

Keywords

javascriptfrontendreacttoolkit

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Commercetools migrated publishing to GitHub Actions CI with SLSA attestation; this is a legitimate org-wide CI/CD transition. ai
phantom-deps phantom-dep:@types/react AI (phantom-deps): Framework-scoped type declaration; convention-loaded, not directly imported. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Babel runtime injected by transpiler; not directly imported by design. ai
phantom-deps phantom-dep:prop-types AI (phantom-deps): Declared peer/type dep; standard React ecosystem pattern for this package. ai
phantom-deps phantom-dep:@commercetools-uikit/i18n AI (phantom-deps): Sibling commercetools package referenced in config; stable false positive. ai
phantom-deps phantom-dep:@commercetools-community-kit/i18n AI (phantom-deps): Sibling commercetools package referenced in config; stable false positive. ai
phantom-deps phantom-dep:@types/prop-types AI (phantom-deps): Type-only dep; convention-loaded, stable false positive for this package. ai

Versions (showing 29 of 29)

Version Deps Published
27.8.0 11 / 5
27.7.0 11 / 5
27.6.3 11 / 5
27.6.2 11 / 5
27.6.1 11 / 5
27.6.0 11 / 5
27.5.4 11 / 5
27.5.3 11 / 5
27.5.2 11 / 5
27.5.1 11 / 5
27.5.0 11 / 5
27.4.2 11 / 5
27.4.1 11 / 5
27.4.0 11 / 5
27.3.0 11 / 5
27.2.0 11 / 5
27.1.0 11 / 5
27.0.0 11 / 5
26.1.0 11 / 5
26.0.2 11 / 5
26.0.1 11 / 5
26.0.0 11 / 5
25.2.0 11 / 5
25.1.0 11 / 5
25.0.0 11 / 5
24.13.0 11 / 5
24.12.0 11 / 5
24.11.0 11 / 5
24.10.0 11 / 5

v27.8.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v27.7.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.