← Home

@plugjs/build

npm Repository Homepage

Simple shared build using PlugJS

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

pfumagalli

Keywords

buildcompileecmascriptjavascriptnodeplugjstranspiletypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:uuid AI (typosquat): Scoped package @plugjs/build; levenshtein match to 'uuid' is spurious, no impersonation intent. ai
typosquat typosquat.levenshtein:esbuild AI (typosquat): Scoped package @plugjs/build; substring match to 'esbuild' is coincidental, not a typosquat. ai

Versions (showing 51 of 114)

View all versions
Version Deps Published
0.6.106 0 / 0
0.6.105 0 / 0
0.6.104 0 / 0
0.6.103 0 / 0
0.6.101 0 / 0
0.6.100 0 / 0
0.6.99 0 / 0
0.6.98 0 / 0
0.6.97 0 / 0
0.6.96 0 / 0
0.6.95 0 / 0
0.6.94 0 / 0
0.6.93 0 / 0
0.6.92 0 / 0
0.6.91 0 / 0
0.6.90 0 / 0
0.6.89 0 / 0
0.6.88 0 / 0
0.6.87 0 / 0
0.6.86 0 / 0
0.6.85 0 / 0
0.6.84 0 / 0
0.6.83 0 / 0
0.6.82 0 / 0
0.6.81 0 / 0
0.6.80 0 / 0
0.6.79 0 / 0
0.6.78 0 / 0
0.6.77 0 / 0
0.6.76 0 / 0
0.6.75 0 / 0
0.6.74 0 / 0
0.6.73 0 / 0
0.6.72 0 / 0
0.6.71 0 / 0
0.6.70 0 / 0
0.6.69 0 / 0
0.6.68 0 / 0
0.6.67 0 / 0
0.6.66 0 / 0
0.6.65 0 / 0
0.6.64 0 / 0
0.6.63 0 / 0
0.6.62 0 / 0
0.6.61 0 / 0
0.6.60 0 / 0
0.6.59 0 / 0
0.6.58 0 / 0
0.6.57 0 / 0
0.6.56 0 / 0
0.6.55 0 / 0

v0.6.106

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.105

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.104

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.103

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.