@nice-move/all-in-vue
[![npm][npm-badge]][npm-url] [![github][github-badge]][github-url] ![node][node-badge]
17
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
airkro
Keywords
eslintnice-moveprettierstylelint
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | dormant-publish | AI (publish-pattern): SLSA provenance attestation via GitHub Actions CI/CD mitigates account-takeover risk; no material changes in this version. | ai | |
| provenance | no-provenance | AI (provenance): Established package with consistent publishing history; lack of provenance is common and not a risk signal here. | ai | |
| phantom-deps | phantom-dep:@nice-move/stylelint-config | AI (phantom-deps): Same-org monorepo dep; re-exported config, not directly imported. | ai | |
| phantom-deps | phantom-dep:@nice-move/prettier-config | AI (phantom-deps): Same-org monorepo dep; re-exported config, not directly imported. | ai | |
| phantom-deps | phantom-dep:@nice-move/cli | AI (phantom-deps): Same-org monorepo dep; not directly imported by design as a tooling config package. | ai | |
| provenance | slsa-provenance | AI (provenance): CI/CD published with Sigstore SLSA attestation; stable supply chain signal for this package. | ai | |
| phantom-deps | phantom-dep:@nice-move/tsconfig | AI (phantom-deps): Exposed as a re-exported tsconfig.json path, not a direct JS import; stable false positive for this package. | ai |