@m5kdev/email
22
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
reion
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): No diff vs last approved version; consistent with automated monorepo release pipeline. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): 100 versions/127 days indicates routine automated releases, not anomalous. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): react-dom is a declared runtime dependency; phantom-dep fires because it's not directly imported in source, but it's a peer/runtime requirement for React email rendering. | ai |
Versions (showing 22 of 122)
| Version | Deps | Published |
|---|---|---|
| 0.8.5 | 3 / 8 | |
| 0.8.4 | 3 / 8 | |
| 0.8.3 | 3 / 8 | |
| 0.8.2 | 3 / 8 | |
| 0.8.0 | 3 / 8 | |
| 0.7.0 | 3 / 7 | |
| 0.6.0 | 3 / 7 | |
| 0.5.0 | 3 / 7 | |
| 0.4.0 | 3 / 7 | |
| 0.3.5 | 3 / 7 | |
| 0.3.4 | 3 / 7 | |
| 0.3.3 | 3 / 7 | |
| 0.3.2 | 3 / 7 | |
| 0.3.1 | 3 / 7 | |
| 0.3.0 | 3 / 7 | |
| 0.2.0 | 3 / 7 | |
| 0.1.5 | 3 / 7 | |
| 0.1.4 | 3 / 7 | |
| 0.1.3 | 3 / 7 | |
| 0.1.2 | 3 / 7 | |
| 0.1.1 | 3 / 7 | |
| 0.1.0 | 3 / 7 |