← Home

@portabletext/editor

npm Repository Homepage
52
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

kmelverexxarsskogsmaskinmariuslundgardbjoergerbottensanity-iosnorreebjosef-sanitystipsanchristianhg

Keywords

collaborativecontenteditorportable-textportable-text-editorrealtimesanitystructuretext

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@portabletext/block-tools AI (dependencies): First-party sibling package from the portabletext org; stable false positive for this package. ai
phantom-deps phantom-dep:lodash.startcase AI (phantom-deps): lodash.startcase is explicitly declared in dependencies; phantom-dep heuristic fires incorrectly here. ai
dependencies unvetted-dep:@portabletext/patches AI (dependencies): First-party sibling package from the same portabletext/editor monorepo. ai
dependencies unvetted-dep:@portabletext/to-html AI (dependencies): First-party sibling package from the same portabletext/editor monorepo. ai
dependencies unvetted-dep:@portabletext/html AI (dependencies): First-party sibling package from the same portabletext/editor monorepo. ai
dependencies unvetted-dep:@portabletext/keyboard-shortcuts AI (dependencies): First-party sibling package from the same portabletext/editor monorepo. ai
dependencies unvetted-dep:@portabletext/markdown AI (dependencies): First-party sibling package from the same portabletext/editor monorepo. ai
dependencies unvetted-dep:@portabletext/schema AI (dependencies): First-party sibling package from the same portabletext/editor monorepo. ai

Versions (showing 52 of 152)

Version Deps Published
3.3.16 15 / 26
3.3.15 15 / 26
3.3.14 15 / 26
3.3.13 15 / 26
3.3.12 15 / 26
3.3.11 15 / 26
3.3.10 15 / 26
3.3.9 14 / 27
3.3.8 15 / 26
3.3.7 15 / 26
3.3.6 17 / 28
3.3.5 17 / 28
3.3.4 14 / 31
3.3.3 14 / 31
3.3.2 12 / 33
3.3.1 15 / 30
3.3.0 15 / 30
3.2.6 14 / 30
3.2.5 15 / 30
3.2.4 15 / 30
3.2.3 15 / 30
3.2.2 15 / 30
3.2.1 15 / 30
3.2.0 16 / 30
3.1.2 15 / 30
3.1.1 15 / 30
3.1.0 15 / 30
3.0.9 15 / 30
3.0.8 15 / 30
3.0.7 15 / 30
3.0.6 15 / 30
3.0.5 15 / 30
3.0.4 15 / 30
3.0.3 15 / 30
3.0.2 15 / 30
3.0.1 15 / 30
3.0.0 15 / 30
2.21.4 15 / 30
2.21.3 15 / 30
2.21.2 15 / 30
2.21.1 15 / 30
2.21.0 15 / 30
2.20.0 15 / 30
2.19.3 15 / 30
2.19.2 15 / 30
2.19.1 15 / 30
2.19.0 15 / 30
2.18.1 15 / 30
2.18.0 15 / 30
2.17.2 15 / 30
2.17.1 16 / 30
1.58.1 16 / 28

v1.58.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.