← Home

@ditojs/build

npm Repository Homepage

Dito.js is a declarative and modern web framework with a focus on API driven development, based on Koa.js, Objection.js and Vue.js

100
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

lehnibotrunner

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:postcss-inset AI (dependencies): postcss-inset is a legitimate PostCSS plugin; stable dependency for this build tooling package. ai
typosquat typosquat.levenshtein:esbuild AI (typosquat): Scoped @ditojs/build is an established monorepo package, not a typosquat of esbuild. ai
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require loads package.json files to enumerate transitive deps for rollup externals — benign build-tool pattern. ai
phantom-deps phantom-dep:pug AI (phantom-deps): pug is a declared dependency used indirectly via build config; phantom-dep heuristic misfires on build tools. ai
phantom-deps phantom-dep:vue AI (phantom-deps): vue is a declared dependency used indirectly via build config; phantom-dep heuristic misfires on build tools. ai
typosquat typosquat.levenshtein:uuid AI (typosquat): Scoped @ditojs/build is an established monorepo package, not a typosquat of uuid. ai
phantom-deps phantom-dep:postcss AI (phantom-deps): postcss is a declared dependency used indirectly via build config; phantom-dep heuristic misfires on build tools. ai
phantom-deps phantom-dep:postcss-html AI (phantom-deps): postcss-html is a declared dependency used indirectly via build config; phantom-dep heuristic misfires on build tools. ai
phantom-deps phantom-dep:postcss-scss AI (phantom-deps): postcss-scss is a declared dependency used indirectly via build config; phantom-dep heuristic misfires on build tools. ai
phantom-deps phantom-dep:sass AI (phantom-deps): sass is a declared dependency used indirectly via build config; phantom-dep heuristic misfires on build tools. ai

Versions (showing 100 of 108)

Version Deps Published
2.99.0 14 / 0
2.97.0 14 / 0
2.96.0 14 / 0
2.95.0 14 / 0
2.93.0 14 / 0
2.92.0 14 / 0
2.91.0 14 / 0
2.90.0 14 / 0
2.89.0 14 / 0
2.88.0 14 / 0
2.87.0 14 / 0
2.86.0 14 / 0
2.85.0 14 / 0
2.84.0 14 / 0
2.83.0 14 / 0
2.82.0 14 / 0
2.81.0 14 / 0
2.80.0 14 / 0
2.79.0 14 / 0
2.78.0 14 / 0
2.77.0 14 / 0
2.75.0 14 / 0
2.74.0 14 / 0
2.73.0 14 / 0
2.72.0 14 / 0
2.71.0 14 / 0
2.70.0 14 / 0
2.69.0 14 / 0
2.68.0 14 / 0
2.67.0 14 / 0
2.66.0 14 / 0
2.65.0 14 / 0
2.64.0 14 / 0
2.63.0 14 / 0
2.62.0 14 / 0
2.61.0 14 / 0
2.60.0 14 / 0
2.59.0 14 / 0
2.58.0 14 / 0
2.57.0 14 / 0
2.56.0 14 / 0
2.55.0 14 / 0
2.54.0 14 / 0
2.53.0 14 / 0
2.52.0 14 / 0
2.51.2 14 / 0
2.51.0 14 / 0
2.50.0 14 / 0
2.49.1 14 / 0
2.49.0 14 / 0
2.48.0 14 / 0
2.47.0 14 / 0
2.46.1 14 / 0
2.46.0 14 / 0
2.45.0 14 / 0
2.44.0 14 / 0
2.43.0 14 / 0
2.42.1 14 / 0
2.42.0 14 / 0
2.41.0 14 / 0
2.40.0 14 / 0
2.39.0 14 / 0
2.38.0 14 / 0
2.37.0 14 / 0
2.36.2 14 / 0
2.36.1 14 / 0
2.36.0 14 / 0
2.35.0 14 / 0
2.34.2 8 / 0
2.34.0 8 / 0
2.33.0 8 / 0
2.32.2 8 / 0
2.32.0 8 / 0
2.31.0 8 / 0
2.30.0 8 / 0
2.29.0 8 / 0
2.28.0 8 / 0
2.27.0 8 / 0
2.26.1 8 / 0
2.26.0 8 / 0
2.25.0 8 / 0
2.24.0 8 / 0
2.23.0 8 / 0
2.22.0 8 / 0
2.21.0 8 / 0
2.20.0 8 / 0
2.19.0 8 / 0
2.18.0 8 / 0
2.17.0 8 / 0
2.16.0 8 / 0
2.15.0 8 / 0
2.14.1 8 / 0
2.14.0 8 / 0
2.13.0 6 / 0
2.12.0 6 / 0
2.11.0 6 / 0
2.10.7 6 / 0
2.10.0 6 / 0
2.9.0 6 / 0
2.8.0 6 / 0
Showing 100 of 108 Next page →

v2.46.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.45.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.44.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.43.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.42.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.42.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.41.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.40.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.39.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.38.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.37.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.36.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.36.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.36.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.35.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.34.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.34.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.33.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.32.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.32.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.31.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.30.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.29.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.28.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.27.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.26.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.26.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.25.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.24.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.23.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.22.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.21.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.20.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.19.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.18.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.17.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.16.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.15.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.14.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.14.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.13.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.12.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.11.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.10.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.10.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.9.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.8.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.