← Home

@draftbit/core

npm Repository Homepage
16
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

adnelsonbluerssenyoussefhennas0lastersieuhuflitspiritanand

Keywords

react-nativeiosandroid

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:react-native-worklets AI (phantom-deps): Platform-specific native dep; conditional import pattern is normal for RN libraries. ai
phantom-deps phantom-dep:date-fns AI (phantom-deps): Large RN UI library; deps referenced in config/conditional contexts are expected. ai
phantom-deps phantom-dep:@emotion/react AI (phantom-deps): Web-target conditional dep in a cross-platform library; stable false positive. ai
phantom-deps phantom-dep:lodash.isequal AI (phantom-deps): Utility dep likely used indirectly or in config; stable false positive for this package. ai
phantom-deps phantom-dep:@emotion/styled AI (phantom-deps): Web-target conditional dep; stable false positive. ai
phantom-deps phantom-dep:react-native-pager-view AI (phantom-deps): Platform-specific binary dep; phantom-dep heuristic unreliable here. ai
phantom-deps phantom-dep:@lottiefiles/dotlottie-react AI (phantom-deps): Config-referenced dep in cross-platform library; stable false positive. ai
phantom-deps phantom-dep:@draftbit/react-theme-provider AI (phantom-deps): Same-org dep; likely re-exported or used indirectly. ai
phantom-deps phantom-dep:@lottiefiles/react-lottie-player AI (phantom-deps): Config-referenced dep; stable false positive for this package. ai
phantom-deps phantom-dep:react-native-webview AI (phantom-deps): Platform-specific binary dep; phantom-dep heuristic unreliable here. ai
typosquat typosquat.levenshtein:cors AI (typosquat): @draftbit/core is a scoped package from the established Draftbit org, not a typosquat of cors. ai

Versions (showing 16 of 16)

Version Deps Published
56.0.3 46 / 8
56.0.2 46 / 8
56.0.1 46 / 8
55.0.2 46 / 8
55.0.1 46 / 8
54.1.1 46 / 8
54.1.0 46 / 8
54.0.7 46 / 8
54.0.6 46 / 8
54.0.4 46 / 8
54.0.3 45 / 8
54.0.2 45 / 8
54.0.1 46 / 8
54.0.0 45 / 8
53.0.4 44 / 8
53.0.3 44 / 8

v56.0.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v56.0.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v56.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v55.0.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v55.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v54.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.