@db-ux/core-eslint-plugin
ESLint plugin for DB UX Design System components
27
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
mfranzkenmerget
Keywords
eslinteslint-plugindb-ux
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@angular-eslint/utils | AI (phantom-deps): @angular-eslint/utils is a declared runtime dependency used in ESLint config/rule helpers; stable false positive for this package. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Scoped org package with 27 published versions and legitimate repo; 0.0.0 is a placeholder version pattern for this project. | ai |
Versions (showing 27 of 27)
| Version | Deps | Published |
|---|---|---|
| 5.0.2 | 1 / 9 | |
| 5.0.1 | 1 / 9 | |
| 5.0.0 | 1 / 9 | |
| 4.14.0 | 1 / 9 | |
| 4.13.0 | 2 / 10 | |
| 4.12.1 | 2 / 10 | |
| 4.12.0 | 2 / 10 | |
| 4.11.1 | 2 / 10 | |
| 4.11.0 | 2 / 10 | |
| 4.10.2 | 2 / 10 | |
| 4.10.1 | 2 / 10 | |
| 4.10.0 | 2 / 10 | |
| 4.9.1 | 2 / 10 | |
| 4.9.0 | 2 / 10 | |
| 4.8.0 | 2 / 10 | |
| 4.7.3 | 2 / 10 | |
| 4.7.2 | 2 / 8 | |
| 4.7.1 | 2 / 8 | |
| 4.7.0 | 2 / 8 | |
| 4.6.1 | 2 / 8 | |
| 4.6.0 | 2 / 8 | |
| 4.5.4 | 2 / 8 | |
| 4.5.3 | 2 / 8 | |
| 4.5.2 | 2 / 8 | |
| 4.5.1 | 2 / 8 | |
| 4.5.0 | 2 / 8 | |
| 0.0.0 | 0 / 0 |
v5.0.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.0.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.0.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.14.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.