@lerna/project
Lerna project configuration
49
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
jameshenrynrwlowner
Keywords
lernacore
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-takeover | AI (maintainer-change): Lerna was publicly transferred to Nrwl in 2022; jameshenry/nrwlowner are the legitimate new stewards. This is a documented acquisition, not a hijack. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher change from evocateur to jameshenry reflects the known Nrwl acquisition of Lerna in May 2022. Legitimate transition. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): jameshenry and nrwlowner are the Nrwl team accounts; addition is part of the documented Lerna stewardship transfer. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): hzoo and evocateur stepped down as part of the Nrwl acquisition; removal is expected and documented. | ai | |
| npm-metadata | url-dep:@lerna/package | AI (npm-metadata): Standard monorepo-internal file: reference within the Lerna monorepo. Not a supply chain risk for the published package. | ai | |
| npm-metadata | url-dep:@lerna/validation-error | AI (npm-metadata): Standard monorepo-internal file: reference within the Lerna monorepo. Not a supply chain risk for the published package. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Dynamic require in apply-extends.js loads user-configured config extensions (like ESLint extends). Legitimate config-loading pattern, not attacker-controlled. | ai |
Versions (showing 49 of 49)
| Version | Deps | Published |
|---|---|---|
| 6.4.1 | 13 / 0 | |
| 6.4.0 | 13 / 0 | |
| 6.3.0 | 13 / 0 | |
| 6.2.0 | 13 / 0 | |
| 6.1.0 | 13 / 0 | |
| 6.0.3 | 13 / 0 | |
| 6.0.2 | 13 / 0 | |
| 6.0.1 | 13 / 0 | |
| 6.0.0 | 13 / 0 | |
| 5.6.2 | 13 / 0 | |
| 5.6.1 | 13 / 0 | |
| 5.6.0 | 13 / 0 | |
| 5.5.4 | 13 / 0 | |
| 5.5.3 | 13 / 0 | |
| 5.5.2 | 13 / 0 | |
| 5.5.1 | 13 / 0 | |
| 5.5.0 | 13 / 0 | |
| 5.4.3 | 12 / 0 | |
| 5.4.2 | 12 / 0 | |
| 5.4.1 | 12 / 0 | |
| 5.4.0 | 12 / 0 | |
| 5.3.0 | 12 / 0 | |
| 5.2.0 | 12 / 0 | |
| 5.1.8 | 12 / 0 | |
| 5.1.7 | 12 / 0 | |
| 5.1.6 | 12 / 0 | |
| 5.1.5 | 12 / 0 | |
| 5.1.4 | 12 / 0 | |
| 5.1.3 | 12 / 0 | |
| 5.1.2 | 12 / 0 | |
| 5.1.1 | 12 / 0 | |
| 5.1.0 | 12 / 0 | |
| 5.0.0 | 12 / 0 | |
| 4.0.0 | 12 / 0 | |
| 3.21.0 | 12 / 0 | |
| 3.18.0 | 12 / 0 | |
| 3.16.0 | 12 / 0 | |
| 3.15.0 | 12 / 0 | |
| 3.14.2 | 12 / 0 | |
| 3.13.1 | 12 / 0 | |
| 3.13.0 | 12 / 0 | |
| 3.11.0 | 12 / 0 | |
| 3.10.0 | 12 / 0 | |
| 3.8.5 | 12 / 0 | |
| 3.7.2 | 12 / 0 | |
| 3.7.0 | 12 / 0 | |
| 3.6.0 | 12 / 0 | |
| 3.5.0 | 12 / 0 | |
| 3.0.0 | 12 / 0 |