← Home

@commercetools-frontend/sdk

npm Repository Homepage
28
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tdeekensemmenkocommercetools-admin

Keywords

javascriptfrontendreacttoolkit

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:unfetch AI (phantom-deps): Declared for polyfill config; stable false positive for this package. ai
phantom-deps phantom-dep:prop-types AI (phantom-deps): React ecosystem peer dep pattern; stable false positive. ai
phantom-deps phantom-dep:@types/react AI (phantom-deps): Framework-scoped type package; stable false positive. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Babel convention dep; stable false positive. ai
phantom-deps phantom-dep:@types/node-fetch AI (phantom-deps): Type-only dep; stable false positive. ai
phantom-deps phantom-dep:@types/prop-types AI (phantom-deps): Type-only dep; stable false positive. ai

Versions (showing 28 of 28)

Version Deps Published
27.7.0 18 / 8
27.6.3 18 / 8
27.6.2 18 / 8
27.6.1 18 / 8
27.6.0 18 / 9
27.5.4 18 / 9
27.5.3 18 / 9
27.5.2 18 / 9
27.5.1 18 / 9
27.5.0 18 / 9
27.4.2 18 / 9
27.4.1 18 / 9
27.4.0 18 / 9
27.3.0 18 / 9
27.2.0 18 / 9
27.1.0 18 / 9
27.0.0 18 / 9
26.1.0 18 / 9
26.0.2 18 / 9
26.0.1 18 / 9
26.0.0 18 / 9
25.2.0 18 / 9
25.1.0 18 / 9
25.0.0 18 / 9
24.13.0 19 / 9
24.12.0 19 / 9
24.11.0 19 / 9
24.10.0 19 / 9

v27.7.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.