@react-native-windows/codegen

Generators for react-native-codegen targeting react-native-windows

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

rnbotdannyvvmicrosoft1esacoatesmicrosoft-oss-releases

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	missing-githead	AI (provenance): Missing gitHead is a side effect of the CI/CD pipeline change between Microsoft automation accounts; no malicious signal for this package.	ai	2026/04/26
provenance	publisher-changed	AI (provenance): Both rnbot and microsoft1es are Microsoft-affiliated automation accounts for react-native-windows publishing; this transition is a legitimate internal change, not a takeover.	ai	2026/04/26
publish-pattern	dormant-publish	AI (publish-pattern): Dormancy is an artifact of version series tracking; microsoft1es has a strong track record and the package content is unchanged from prior approved versions.	ai	2026/04/26
phantom-deps	phantom-dep:mustache	AI (phantom-deps): mustache is declared in package.json dependencies and used in the compiled output; phantom-dep false positive for TypeScript-compiled packages.	ai	2026/04/25
semgrep	semgrep:dynamic-require	AI (semgrep): Dynamic requires are used to resolve known peer dependency paths (react-native, @react-native/codegen) at runtime — standard pattern for a codegen tool, not arbitrary module loading.	ai	2026/04/25
phantom-deps	phantom-dep:minimatch	AI (phantom-deps): minimatch is declared in package.json dependencies and used in the compiled output; phantom-dep false positive for TypeScript-compiled packages.	ai	2026/04/25
dependencies	unvetted-dep:@react-native-windows/fs	AI (dependencies): First-party sibling package from the same microsoft/react-native-windows monorepo, published by the same microsoft1es account at the same version.	ai	2026/04/25
phantom-deps	phantom-dep:chalk	AI (phantom-deps): chalk is declared in package.json dependencies and used in the compiled output; phantom-dep false positive for TypeScript-compiled packages.	ai	2026/04/25

Versions (showing 51 of 62)

View all versions

Version	Deps	Published
0.84.0	7 / 15	2026-06-18
0.83.1	7 / 15	2026-06-18
0.83.0	7 / 15	2026-05-26
0.82.1	7 / 15	2026-05-26
0.82.0	7 / 15	2026-03-12
0.81.6	6 / 15	2026-06-17
0.81.5	6 / 15	2026-03-21
0.81.4	6 / 15	2026-03-12
0.81.3	6 / 15	2026-03-07
0.81.2	6 / 15	2026-02-11
0.81.1	6 / 15	2026-01-27
0.81.0	6 / 15	2025-12-20
0.80.2	6 / 15	2025-12-20
0.80.1	6 / 15	2025-12-12
0.80.0	6 / 15	2025-10-28
0.79.1	6 / 15	2025-10-27
0.79.0	6 / 15	2025-06-10
0.78.3	6 / 15	2025-06-10
0.78.2	6 / 15	2025-06-02
0.78.1	6 / 15	2025-04-14
0.78.0	6 / 15	2025-02-27
0.77.2	6 / 15	2025-04-14
0.77.1	6 / 15	2025-02-27
0.77.0	6 / 15	2025-01-24
0.76.3	6 / 15	2025-03-17
0.76.2	6 / 15	2025-01-24
0.76.1	6 / 15	2024-12-16
0.76.0	6 / 15	2024-11-12
0.75.7	6 / 15	2025-04-28
0.75.6	6 / 15	2024-12-16
0.75.5	6 / 15	2024-11-25
0.75.4	6 / 15	2024-11-11
0.75.3	6 / 15	2024-10-28
0.75.2	6 / 15	2024-10-14
0.75.1	6 / 15	2024-09-09
0.75.0	6 / 15	2024-08-19
0.74.9	6 / 15	2026-03-20
0.74.8	6 / 15	2025-03-07
0.74.7	6 / 15	2025-02-03
0.74.6	6 / 15	2024-12-10
0.74.5	6 / 15	2024-11-05
0.74.4	6 / 15	2024-10-17
0.74.3	6 / 15	2024-09-06
0.74.2	6 / 15	2024-08-19
0.74.1	6 / 15	2024-07-01
0.74.0	6 / 15	2024-04-27
0.73.2	6 / 15	2024-07-01
0.73.1	6 / 15	2024-04-26
0.73.0	6 / 15	2023-12-08
0.72.4	6 / 15	2024-07-01
0.72.3	6 / 15	2023-12-08