← Home

@nx/esbuild

npm Repository Homepage

The Nx Plugin for esbuild contains executors and generators that support building applications using esbuild

56
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

nrwlownernrwl-jasonjack-nrwlmaxk-nrwljameshenry

Keywords

MonorepoEsBuildWebCLIFront-endBackend

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:dynamic-require AI (semgrep): Intentional user-supplied esbuild config loader; stable pattern for this package. ai
semgrep semgrep:env-bulk-read AI (semgrep): Reads only NX_PUBLIC_* and NODE_ENV keys; documented behavior for Nx env variable injection. ai

Versions (showing 56 of 56)

Version Deps Published
23.1.0 6 / 1
23.0.2 6 / 1
23.0.1 6 / 1
23.0.0 6 / 1
22.7.7 6 / 1
22.7.6 6 / 1
22.7.5 6 / 1
22.7.4 6 / 1
22.7.3 6 / 1
22.7.2 6 / 1
22.7.1 6 / 1
22.7.0 6 / 1
22.6.5 6 / 1
22.6.4 6 / 1
22.6.3 6 / 1
22.6.2 6 / 1
22.6.1 6 / 1
22.6.0 6 / 1
22.5.4 6 / 1
22.5.3 6 / 1
22.5.2 6 / 1
22.5.1 6 / 1
22.5.0 6 / 1
22.4.5 6 / 1
22.4.4 6 / 1
22.4.3 6 / 1
22.4.2 6 / 1
22.4.1 6 / 1
22.4.0 6 / 1
22.3.3 6 / 1
22.3.2 6 / 1
22.3.1 6 / 1
22.3.0 6 / 1
22.2.7 6 / 1
22.2.6 6 / 1
22.2.5 6 / 1
22.2.4 6 / 1
22.2.3 6 / 1
22.2.2 6 / 1
22.2.1 6 / 1
22.2.0 6 / 1
22.1.3 6 / 1
22.1.2 6 / 1
22.1.1 6 / 1
22.1.0 6 / 1
22.0.4 6 / 1
22.0.3 6 / 1
22.0.2 6 / 1
22.0.1 6 / 1
22.0.0 6 / 1
21.6.11 6 / 1
21.6.10 6 / 1
21.6.9 6 / 1
21.3.12 6 / 0
20.8.4 6 / 0
20.8.3 6 / 0

v23.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v23.0.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v22.7.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.