← Home

@fedify/lint

npm Repository Homepage

Fedify linting rules and plugins

51
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

hongminheez9mb12chanhaeng

Keywords

FedifyActivityPubFediverseLintESLintESLint Pluginoxlintoxc

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@fxts/core AI (dependencies): @fxts/core is a legitimate functional programming utility library for TypeScript; its use in an ESLint plugin is reasonable and poses no supply chain risk. ai
typosquat typosquat.levenshtein:eslint AI (typosquat): @fedify/lint is a scoped ESLint plugin for the Fedify framework, not a typosquat of eslint. The name similarity is purely coincidental and the package is part of the legitimate fedify-dev org. ai
typosquat typosquat.levenshtein:pino AI (typosquat): @fedify/lint is a scoped ESLint plugin for the Fedify framework, not a typosquat of pino. The Levenshtein match is coincidental. ai
phantom-deps phantom-dep:@typescript-eslint/utils AI (phantom-deps): @typescript-eslint/utils is listed in dependencies and used in ESLint plugin config files; the phantom-dep finding reflects indirect usage patterns common in ESLint plugins. ai

Versions (showing 51 of 57)

View all versions
Version Deps Published
2.3.3 3 / 7
2.3.2 3 / 7
2.3.1 3 / 7
2.3.0 3 / 7
2.2.8 3 / 5
2.2.7 3 / 5
2.2.6 3 / 5
2.2.5 3 / 5
2.2.4 3 / 5
2.2.3 3 / 5
2.2.2 3 / 5
2.2.1 3 / 5
2.2.0 3 / 5
2.1.19 3 / 5
2.1.18 3 / 5
2.1.17 3 / 5
2.1.16 3 / 5
2.1.15 3 / 5
2.1.14 3 / 5
2.1.13 3 / 5
2.1.12 3 / 5
2.1.11 3 / 5
2.1.10 3 / 5
2.1.9 3 / 5
2.1.8 3 / 5
2.1.7 3 / 5
2.1.6 3 / 5
2.1.5 3 / 5
2.1.4 3 / 5
2.1.3 3 / 5
2.1.2 3 / 5
2.1.1 3 / 5
2.1.0 3 / 5
2.0.23 3 / 5
2.0.22 3 / 5
2.0.21 3 / 5
2.0.20 3 / 5
2.0.19 3 / 5
2.0.18 3 / 5
2.0.17 3 / 5
2.0.16 3 / 5
2.0.15 3 / 5
2.0.14 3 / 5
2.0.13 3 / 5
2.0.12 3 / 5
2.0.11 3 / 5
2.0.10 3 / 5
2.0.9 3 / 5
2.0.8 3 / 5
2.0.7 3 / 5
2.0.6 3 / 5

v2.3.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.2.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.2.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.2.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.