← Home

@commercetools-frontend/permissions

npm Repository Homepage
28
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tdeekensemmenkocommercetools-admin

Keywords

javascriptfrontendreacttoolkit

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Commercetools migrated publishing to GitHub Actions CI/CD with SLSA provenance attestation; stable pattern for this org going forward. ai
phantom-deps phantom-dep:prop-types AI (phantom-deps): Declared peer/runtime dep in React ecosystem; stable false positive for this package. ai
phantom-deps phantom-dep:@types/react AI (phantom-deps): Framework-scoped type declaration; convention-loaded, not directly imported. ai
phantom-deps phantom-dep:@types/lodash AI (phantom-deps): Type declaration package; convention-loaded, stable false positive. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Babel runtime injected by transpiler; not directly imported by design. ai
phantom-deps phantom-dep:@types/prop-types AI (phantom-deps): Type declaration package; convention-loaded, stable false positive. ai

Versions (showing 28 of 28)

Version Deps Published
27.7.0 12 / 5
27.6.3 12 / 5
27.6.2 12 / 5
27.6.1 12 / 5
27.6.0 12 / 5
27.5.4 12 / 5
27.5.3 12 / 5
27.5.2 12 / 5
27.5.1 12 / 5
27.5.0 12 / 5
27.4.2 12 / 5
27.4.1 12 / 5
27.4.0 12 / 5
27.3.0 12 / 5
27.2.0 12 / 5
27.1.0 12 / 5
27.0.0 12 / 5
26.1.0 12 / 5
26.0.2 12 / 5
26.0.1 12 / 5
26.0.0 12 / 5
25.2.0 12 / 5
25.1.0 12 / 5
25.0.0 12 / 5
24.13.0 12 / 5
24.12.0 12 / 5
24.11.0 12 / 5
24.10.0 12 / 5

v27.7.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.