← Home

@digigov/cli-lint

npm

Lint plugin for Digigov CLI

14
Versions
BSD-2-Clause
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

kpaptsironisvkefallinos.grnetthanasisk00sotirangelo

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@vitest/eslint-plugin AI (dependencies): Standard vitest ESLint plugin used as a lint tooling dependency; low risk for this package's purpose. ai
provenance missing-githead AI (provenance): Established package with 217 versions; publisher has 52 approved packages; no other risk signals present. ai
phantom-deps phantom-dep:publint AI (phantom-deps): Config-only tool; not imported directly by design. ai
phantom-deps phantom-dep:eslint-config-prettier AI (phantom-deps): ESLint config dep; referenced in config files, not imported directly. ai
phantom-deps phantom-dep:@rushstack/eslint-patch AI (phantom-deps): ESLint patch loaded via config, not direct import. ai
phantom-deps phantom-dep:eslint-plugin-css-modules AI (phantom-deps): ESLint plugin used in config files, not imported directly. ai

Versions (showing 14 of 14)

Version Deps Published
2.5.0 17 / 4
2.4.2 17 / 4
2.4.1 17 / 4
2.4.0 17 / 4
2.3.0 17 / 4
2.2.3 17 / 4
2.2.0 17 / 4
2.1.0 17 / 4
2.0.14 17 / 4
2.0.9 17 / 4
2.0.8 17 / 1
2.0.6 17 / 1
2.0.4 17 / 1
2.0.2 17 / 1

v2.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.