@eclipse-glsp/dev (EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0) 2 versions

@eclipse-glsp/dev

All-in-one meta package that provides the GLSP development and test configuration packages, as well as the GLSP CLI package

Versions

(EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0)

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

tortmayrplangereclipse-glsp-botmfleckjfaltermeierndoscheklkoehler

eclipseconfig

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
typosquat	typosquat.levenshtein:ajv	AI (typosquat): Scoped Eclipse GLSP package; Levenshtein match to 'ajv' is a false positive for this well-established org.	ai	2026/05/08
phantom-deps	phantom-dep:@eclipse-glsp/cli	AI (phantom-deps): Meta-package that re-exports same-org deps; not directly imported by design.	ai	2026/05/08
phantom-deps	phantom-dep:@eclipse-glsp/config	AI (phantom-deps): Meta-package that re-exports same-org deps; not directly imported by design.	ai	2026/05/08
phantom-deps	phantom-dep:@eclipse-glsp/config-test	AI (phantom-deps): Meta-package that re-exports same-org deps; not directly imported by design.	ai	2026/05/08

Version	Deps	Published
2.6.0	3 / 0	2026-02-09
2.5.0	3 / 0	2025-09-07

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.