← Home

@intlayer/webpack

npm Repository Homepage

Webpack plugin for seamless integration with Intlayer, enhancing JavaScript apps built with React, Next.js and more.

100
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

ay.pineau

Keywords

intlayerwebpackapplicationtranspiletypescriptjavascriptjsonfile

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
bogus-package bogus-package AI (bogus-package): Shared monorepo README false positive, not indicative of malicious intent. ai
source-diff source-size-tripled AI (source-diff): Consistent with monorepo build tooling change, not injected payload. ai
source-diff large-new-source-files AI (source-diff): Consistent with monorepo build tooling change, not injected payload. ai
dependencies unvetted-dep:@intlayer/engine AI (dependencies): First-party monorepo sibling dep, same version pin as other intlayer packages. ai
publish-pattern new-deps-added AI (publish-pattern): Internal package swap within same monorepo/org, not a third-party dep. ai
phantom-deps phantom-dep:@intlayer/config AI (phantom-deps): Same-org monorepo package; phantom-dep heuristic is a stable false positive here. ai
phantom-deps phantom-dep:@intlayer/chokidar AI (phantom-deps): Same-org monorepo package; phantom-dep heuristic is a stable false positive here. ai
provenance missing-githead AI (provenance): Likely CI/publish environment change; no other malicious signals present across 351 versions. ai
provenance no-provenance AI (provenance): Established intlayer monorepo; provenance absence is consistent across all versions of this package family. ai
phantom-deps phantom-dep:fast-glob AI (phantom-deps): fast-glob is explicitly declared in dependencies; phantom-dep is a false positive for this package. ai

Versions (showing 100 of 139)

Version Deps Published
9.0.0 7 / 8
8.12.4 7 / 8
8.12.3 7 / 8
8.12.2 7 / 8
8.12.1 7 / 8
8.12.0 7 / 8
8.11.3 7 / 8
8.11.2 7 / 8
8.11.1 7 / 8
8.11.0 7 / 8
8.10.1 7 / 8
8.10.0 7 / 8
8.9.8 7 / 8
8.9.7 7 / 8
8.9.6 7 / 8
8.9.5 7 / 8
8.9.4 7 / 8
8.9.3 7 / 8
8.9.2 7 / 8
8.9.1 7 / 8
8.9.0 7 / 8
8.8.0 7 / 8
8.7.14 7 / 8
8.7.13 7 / 8
8.7.12 7 / 8
8.7.11 7 / 8
8.7.10 7 / 8
8.7.9 7 / 8
8.7.8 7 / 8
8.7.7 7 / 8
8.7.6 7 / 8
8.7.5 7 / 8
8.7.4 7 / 8
8.7.3 7 / 8
8.7.2 7 / 8
8.7.1 7 / 8
8.7.0 7 / 8
8.6.10 7 / 8
8.6.9 7 / 8
8.6.8 7 / 8
8.6.7 7 / 8
8.6.6 7 / 8
8.6.5 7 / 8
8.6.4 7 / 8
8.6.3 7 / 8
8.6.2 7 / 8
8.6.1 7 / 8
8.6.0 6 / 8
8.5.2 6 / 8
8.5.1 6 / 8
8.5.0 6 / 8
8.4.10 6 / 8
8.4.9 6 / 8
8.4.8 6 / 8
8.4.7 6 / 8
8.4.6 6 / 8
8.4.5 6 / 8
8.4.4 6 / 8
8.4.3 6 / 8
8.4.2 6 / 8
8.4.1 6 / 8
8.4.0 6 / 8
8.3.4 6 / 8
8.3.3 6 / 8
8.3.2 6 / 8
8.3.1 6 / 8
8.3.0 6 / 8
8.2.4 6 / 8
8.2.3 6 / 8
8.2.2 6 / 8
8.2.1 6 / 8
8.2.0 6 / 8
8.1.11 7 / 9
8.1.10 7 / 9
8.1.9 7 / 9
8.1.8 7 / 9
8.1.7 7 / 9
8.1.6 7 / 9
8.1.5 7 / 9
8.1.4 7 / 9
8.1.3 7 / 9
8.1.2 7 / 9
8.1.1 7 / 9
8.1.0 7 / 9
8.0.5 7 / 9
8.0.4 7 / 9
8.0.2 7 / 9
8.0.1 7 / 9
8.0.0 7 / 9
7.5.14 7 / 9
7.5.13 7 / 9
7.5.12 7 / 9
7.5.11 7 / 9
7.5.10 7 / 9
7.5.9 7 / 9
7.5.8 7 / 9
7.5.7 7 / 9
7.5.6 7 / 9
7.5.5 7 / 9
7.5.4 7 / 9
Showing 100 of 139 Next page →

v9.0.0

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.