@npmcli/redact
Redact sensitive npm information from output
13
Versions
ISC
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
saquibkhannpm-cli-opsreggiowlstronaut
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | suspicious-initial-version | AI (npm-metadata): @npmcli org routinely publishes 0.0.0 placeholder versions via template-oss; this is a stable pattern for this publisher, not a malware indicator. | ai | |
| typosquat | typosquat.levenshtein:react | AI (typosquat): @npmcli/redact is an official npm CLI org package with SLSA provenance; the Levenshtein match to 'react' is coincidental and not a typosquat signal for this scoped package. | ai |