@lvce-editor/extension-host-helper-process MIT 2 versions

@lvce-editor/extension-host-helper-process

npm Repository Homepage

Versions

MIT

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

levivilet

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
dependencies	unvetted-dep:@lvce-editor/rpc	AI (dependencies): Same-org monorepo dependency; stable pattern across all versions of this package.	ai	2026/05/27
dependencies	unvetted-dep:@lvce-editor/assert	AI (dependencies): Same-org monorepo dependency; stable pattern across all versions of this package.	ai	2026/05/27
npm-metadata	no-description	AI (npm-metadata): Long-lived internal package in a monorepo; empty description is a consistent pattern across versions.	ai	2026/04/30
phantom-deps	phantom-dep:got	AI (phantom-deps): got is a declared runtime dependency; phantom-dep heuristic is a false positive here.	ai	2026/04/30
phantom-deps	phantom-dep:execa	AI (phantom-deps): execa is a declared runtime dependency; phantom-dep heuristic is a false positive here.	ai	2026/04/30

Version	Deps	Published
0.51.1	7 / 0	2025-05-03
0.51.0	7 / 0	2025-05-01

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.