@microsoft/fetch-event-source
A better API for making Event Source requests, with all the features of fetch()
5
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
microsoft1esvishwambobbybhamravincenzocarusopatobeltran
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): @microsoft scope is org-controlled; vishwam is a long-standing publisher (484 approved, 0 rejected) — legitimate Microsoft team member. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainers are Microsoft team members authorized under the @microsoft org scope; normal team changes. | ai | |
| bogus-package | bogus-package | AI (bogus-package): README link density and missing keywords are false positives for a well-established Microsoft package with 2M weekly downloads. | ai |