@messageformat/core
PluralFormat and SelectFormat Message and i18n Tool - A JavaScript Implemenation of the ICU standards.
6
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
eemeli
Keywords
i18npluralformaticugettextselectformatmessageformatinternationalization
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @messageformat/core is a scoped i18n package with no relation to 'cors'; the Levenshtein match is purely coincidental and this is a stable false positive for this package. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): new Function() is the core mechanism of a message format compiler — it compiles ICU message strings to JS functions. This is expected, documented behavior for this package. | ai |