← Home

@lingui/cli

npm Repository Homepage
7
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

andrii.bodnarserhiydmytryshyn

Keywords

linguilinguijsclii18nextractcompilecataloggettexttranslationlocalization

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): @babel/runtime is a declared runtime dep used transitively by Babel tooling; stable false positive for this package. ai
typosquat typosquat.levenshtein:joi AI (typosquat): Scoped @lingui/cli is a well-known i18n CLI; edit-distance match to 'joi' is a heuristic false positive. ai
phantom-deps phantom-dep:jiti AI (phantom-deps): jiti is explicitly listed in dependencies; phantom-dep heuristic misfired. ai

Versions (showing 7 of 7)

Version Deps Published
6.2.0 22 / 8
6.1.0 22 / 8
6.0.1 22 / 8
6.0.0 22 / 8
5.8.0 27 / 8
5.6.1 27 / 8
5.6.0 27 / 8

v6.2.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.8.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.6.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.6.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.