@lerna/package
Lerna's internal representation of a package
41
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
jameshenrynrwlowner
Keywords
lernacore
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-takeover | AI (maintainer-change): Lerna's transfer from hzoo/evocateur to Nrwl (jameshenry/nrwlowner) in 2022 was a well-publicized, legitimate stewardship handoff, not a hijack. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher change reflects the documented Lerna → Nrwl transfer; jameshenry is a long-standing npm publisher with a clean track record. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainers jameshenry and nrwlowner are Nrwl employees who took over Lerna in a publicly announced transition. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Removal of hzoo and evocateur is consistent with the known Lerna ownership transfer to Nrwl. | ai | |
| provenance | no-provenance | AI (provenance): Published in May 2022 before Sigstore provenance was standard practice; no malicious indicators present. | ai |
Versions (showing 41 of 41)
| Version | Deps | Published |
|---|---|---|
| 6.4.1 | 3 / 0 | |
| 6.4.0 | 3 / 0 | |
| 6.3.0 | 3 / 0 | |
| 6.2.0 | 3 / 0 | |
| 6.1.0 | 3 / 0 | |
| 6.0.3 | 3 / 0 | |
| 6.0.2 | 3 / 0 | |
| 6.0.1 | 3 / 0 | |
| 6.0.0 | 3 / 0 | |
| 5.6.2 | 3 / 0 | |
| 5.6.1 | 3 / 0 | |
| 5.6.0 | 3 / 0 | |
| 5.5.4 | 3 / 0 | |
| 5.5.3 | 3 / 0 | |
| 5.5.2 | 3 / 0 | |
| 5.5.1 | 3 / 0 | |
| 5.5.0 | 3 / 0 | |
| 5.4.3 | 3 / 0 | |
| 5.4.2 | 3 / 0 | |
| 5.4.1 | 3 / 0 | |
| 5.4.0 | 3 / 0 | |
| 5.3.0 | 3 / 0 | |
| 5.2.0 | 3 / 0 | |
| 5.1.8 | 3 / 0 | |
| 5.1.7 | 3 / 0 | |
| 5.1.6 | 3 / 0 | |
| 5.1.5 | 3 / 0 | |
| 5.1.4 | 3 / 0 | |
| 5.1.3 | 3 / 0 | |
| 5.1.1 | 3 / 0 | |
| 5.1.0 | 3 / 0 | |
| 5.0.0 | 3 / 0 | |
| 4.0.0 | 3 / 0 | |
| 3.16.0 | 3 / 0 | |
| 3.14.2 | 3 / 0 | |
| 3.13.0 | 3 / 0 | |
| 3.11.0 | 3 / 0 | |
| 3.7.2 | 3 / 0 | |
| 3.7.0 | 3 / 0 | |
| 3.6.0 | 2 / 0 | |
| 3.0.0 | 2 / 0 |