@react-spring/core
The platform-agnostic core of `react-spring`
7
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
tdfka_rick
Keywords
animatedanimationhooksmotionreactreact-nativespringtypescriptvelocity
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): SLSA provenance attestation present; gitHead absence reflects CI publish change, not a supply chain concern. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): The Levenshtein match to 'cors' is a false positive; '@react-spring/core' is clearly react-spring related, not a cors typosquat. | ai |