← Home

@faststore/sdk

npm Repository Homepage

Hooks for creating your next component library

80
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

emersonlaurentinoguieevcmarcos_vtexlariciamotaeduardo.formigahellofanny

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/cjs/index.js AI (source-diff): Standard Vite-minified CJS bundle; content is readable SDK code, not obfuscated malware. Stable for this package. ai
provenance publisher-changed AI (provenance): VTEX org migrated publishing to GitHub Actions CI/CD with SLSA attestation; stable organizational pattern. ai
publish-pattern dormant-publish AI (publish-pattern): Package is part of vtex/faststore monorepo; dormancy reflects monorepo release cadence, not abandonment. ai
phantom-deps phantom-dep:@types/react AI (phantom-deps): @types/react is a type-only dependency; not directly imported at runtime by convention. ai

Versions (showing 80 of 80)

Version Deps Published
4.1.1 3 / 13
4.1.0 3 / 12
4.0.0 3 / 12
3.99.4 4 / 11
3.99.2 4 / 11
3.99.1 4 / 11
3.99.0 4 / 11
3.98.0 4 / 11
3.97.0 4 / 11
3.96.0 4 / 11
3.95.0 4 / 11
3.94.0 4 / 11
3.93.0 4 / 11
3.92.0 4 / 11
3.91.2 4 / 11
3.91.1 4 / 11
3.90.0 4 / 11
3.89.4 4 / 11
3.89.2 4 / 11
3.88.6 4 / 11
3.85.0 4 / 11
3.83.1 4 / 11
3.81.0 4 / 11
3.80.0 4 / 11
3.77.2 4 / 11
3.72.0 4 / 11
3.68.0 4 / 11
3.63.0 4 / 11
3.60.3 4 / 11
3.60.2 4 / 11
3.56.1 2 / 11
3.50.3 2 / 11
3.49.1 2 / 11
3.49.0 2 / 11
3.46.0 2 / 11
3.45.0 2 / 11
3.44.0 2 / 11
3.38.3 2 / 11
3.29.0 2 / 11
3.28.0 2 / 11
3.26.0 2 / 11
3.25.11 2 / 11
3.22.2 2 / 11
3.15.3 2 / 11
3.15.0 1 / 9
3.14.2 1 / 9
3.13.1 1 / 9
3.11.4 1 / 9
3.11.3 1 / 9
3.9.2 1 / 11
3.9.0 1 / 11
3.5.0 1 / 11
3.4.4 1 / 11
3.4.3 1 / 11
3.4.2 1 / 11
3.4.1 1 / 11
3.4.0 1 / 11
3.1.3 1 / 11
3.0.160 1 / 11
3.0.152 1 / 11
3.0.150 1 / 11
3.0.135 1 / 11
3.0.131 1 / 11
3.0.120 1 / 11
3.0.116 1 / 11
3.0.110 1 / 11
3.0.109 1 / 11
3.0.108 1 / 11
3.0.107 1 / 11
3.0.106 1 / 11
3.0.97 1 / 11
3.0.95 1 / 11
3.0.94 1 / 11
3.0.88 1 / 11
3.0.84 1 / 11
3.0.68 1 / 11
3.0.66 1 / 11
3.0.63 1 / 11
3.0.54 1 / 11
3.0.47 1 / 11

v3.38.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.29.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.28.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.26.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.25.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.22.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.15.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.15.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.14.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.13.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.11.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.11.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.9.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.9.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.4.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.4.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.4.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.4.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.4.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.160

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.152

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.150

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.135

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.131

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.120

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.116

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.110

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.109

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.108

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.107

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.106

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.97

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.95

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.94

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.88

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.84

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.68

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.66

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.63

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.54

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.47

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.