@preact-signals/safe-react No license 2 versions

@preact-signals/safe-react

npm Repository Homepage

Versions

—

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

xantre-godlike

preact-signalsreactsignals

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
phantom-deps	phantom-dep:hotscript	AI (phantom-deps): Build/type-level dependency; not directly imported at runtime, stable false positive for this package.	ai	2026/05/27
phantom-deps	phantom-dep:@babel/helper-plugin-utils	AI (phantom-deps): Framework-scoped Babel helper loaded by convention, not direct import; stable false positive.	ai	2026/05/27

Version	Deps	Published
0.11.0	7 / 28	2026-03-22
0.10.0	7 / 28	2025-12-26

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.