@dword-design/base-config-node
<!-- TITLE/ --> # @dword-design/base-config-node <!-- /TITLE -->
9
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
dword-design
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed to GitHub Actions as part of a legitimate CI/CD migration; SLSA provenance attestation confirms integrity. This pattern is stable for this package going forward. | ai | |
| phantom-deps | phantom-dep:mkdist | AI (phantom-deps): mkdist is invoked via build config, not direct import. Expected pattern for a build configuration package. | ai | |
| phantom-deps | phantom-dep:vue-tsc | AI (phantom-deps): vue-tsc is a CLI tool invoked via config, not directly imported. Expected for a build config package. | ai | |
| phantom-deps | phantom-dep:typescript | AI (phantom-deps): typescript is a toolchain dependency used via config, not directly imported. Standard pattern for build config packages. | ai | |
| phantom-deps | phantom-dep:vue | AI (phantom-deps): Build config package; vue is referenced in config files as a peer tool, not directly imported. Expected pattern for this type of package. | ai | |
| phantom-deps | phantom-dep:babel-plugin-module-resolver | AI (phantom-deps): Babel plugin referenced in config, not directly imported. Standard pattern for build config packages. | ai | |
| phantom-deps | phantom-dep:babel-plugin-add-import-extension | AI (phantom-deps): Babel plugin referenced in config, not directly imported. Standard pattern for build config packages. | ai | |
| phantom-deps | phantom-dep:vue-sfc-transformer | AI (phantom-deps): vue-sfc-transformer is referenced in config files as a transform tool, not directly imported. Expected for this package type. | ai |