@nozomiishii/eslint-config
Nozomi's Recommended eslint config
35
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
nozomiishii
Keywords
eslintlintconfig
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:eslint-typegen | AI (phantom-deps): Used in config generation scripts; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): Type-only package; phantom-dep false positive for this package type. | ai | |
| phantom-deps | phantom-dep:tailwindcss | AI (phantom-deps): Referenced in eslint config rules, not directly imported; stable false positive. | ai | |
| phantom-deps | phantom-dep:@swc-node/register | AI (phantom-deps): Used via CLI flag in postinstall script, not direct import; stable false positive. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-jsonc | AI (phantom-deps): Referenced in config files by convention; stable false positive for eslint config packages. | ai | |
| phantom-deps | phantom-dep:jsonc-eslint-parser | AI (phantom-deps): Referenced in config files by convention; stable false positive for eslint config packages. | ai | |
| phantom-deps | phantom-dep:@eslint/config-inspector | AI (phantom-deps): Dev/inspector tool loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:eslint-import-resolver-typescript | AI (phantom-deps): Resolver referenced in config, not directly imported; stable false positive for eslint config packages. | ai | |
| install-scripts | install-script:postinstall | FP sweep (deep/reputable): benign dev-tooling install script (git-hooks/build/codegen/playwright) on an established package with a real repo; verified. Flip to accept. | sean | |
| phantom-deps | phantom-dep:eslint-plugin-tsdoc | AI (phantom-deps): Referenced in config files by convention; stable false positive for eslint config packages. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Fires in bundled @eslint/config-inspector Nuxt artifact; not authored malicious code. | ai |
Versions (showing 35 of 35)
| Version | Deps | Published |
|---|---|---|
| 1.11.0 | 33 / 4 | |
| 1.10.0 | 33 / 4 | |
| 1.9.2 | 33 / 4 | |
| 1.9.1 | 33 / 4 | |
| 1.9.0 | 33 / 4 | |
| 1.8.0 | 33 / 4 | |
| 1.7.0 | 33 / 4 | |
| 1.6.0 | 33 / 4 | |
| 1.5.1 | 33 / 4 | |
| 1.5.0 | 33 / 4 | |
| 1.4.0 | 33 / 4 | |
| 1.3.0 | 33 / 4 | |
| 1.2.0 | 33 / 4 | |
| 1.1.0 | 33 / 4 | |
| 1.0.1 | 33 / 4 | |
| 0.9.1 | 33 / 4 | |
| 0.8.0 | 34 / 1 | |
| 0.7.0 | 34 / 1 | |
| 0.6.14 | 34 / 1 | |
| 0.6.13 | 34 / 1 | |
| 0.6.12 | 34 / 1 | |
| 0.6.11 | 34 / 1 | |
| 0.6.10 | 34 / 1 | |
| 0.6.9 | 34 / 1 | |
| 0.6.8 | 34 / 1 | |
| 0.6.7 | 34 / 1 | |
| 0.6.4 | 34 / 1 | |
| 0.6.3 | 34 / 1 | |
| 0.6.2 | 34 / 2 | |
| 0.6.1 | 34 / 0 | |
| 0.6.0 | 34 / 0 | |
| 0.5.3 | 33 / 0 | |
| 0.5.2 | 33 / 0 | |
| 0.5.1 | 33 / 0 | |
| 0.5.0 | 32 / 0 |
v1.11.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.10.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.9.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.