← Home

@solid-devtools/shared

46
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

thetarnav.

Keywords

soliddevtools

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@solid-primitives/immutable AI (dependencies): Well-known SolidJS primitives package, same ecosystem as existing deps. ai
phantom-deps phantom-dep:type-fest AI (phantom-deps): Type-only usage in config, stable false positive. ai
phantom-deps phantom-dep:@solid-primitives/event-bus AI (phantom-deps): Type-only usage in config, stable false positive. ai
dependencies unvetted-dep:@solid-primitives/rootless AI (dependencies): @solid-primitives/rootless is a legitimate SolidJS community primitive; stable dependency for this package. ai
dependencies unvetted-dep:@solid-primitives/scheduled AI (dependencies): @solid-primitives/scheduled is a legitimate SolidJS community primitive; stable dependency for this package. ai
dependencies unvetted-dep:@solid-primitives/static-store AI (dependencies): @solid-primitives/static-store is a legitimate SolidJS community primitive; stable dependency for this package. ai
dependencies unvetted-dep:@solid-primitives/event-listener AI (dependencies): @solid-primitives/event-listener is a legitimate SolidJS community primitive; stable dependency for this package. ai
dependencies unvetted-dep:@solid-primitives/refs AI (dependencies): @solid-primitives/refs is a legitimate SolidJS community primitive; stable dependency for this package. ai
phantom-deps phantom-dep:@solid-primitives/styles AI (phantom-deps): Referenced in build/config files in monorepo context; not a phantom dep concern for this package. ai
phantom-deps phantom-dep:@solid-primitives/scheduled AI (phantom-deps): Referenced in build/config files in monorepo context; not a phantom dep concern for this package. ai
phantom-deps phantom-dep:@solid-primitives/static-store AI (phantom-deps): Referenced in build/config files in monorepo context; not a phantom dep concern for this package. ai
phantom-deps phantom-dep:@solid-primitives/refs AI (phantom-deps): Referenced in build/config files in monorepo context; not a phantom dep concern for this package. ai
dependencies unvetted-dep:@solid-primitives/media AI (dependencies): @solid-primitives/media is a legitimate SolidJS community primitive; stable dependency for this package. ai
dependencies unvetted-dep:@solid-primitives/styles AI (dependencies): @solid-primitives/styles is a legitimate SolidJS community primitive; stable dependency for this package. ai

Versions (showing 46 of 46)

Version Deps Published
0.20.0 9 / 0
0.19.1 9 / 0
0.19.0 9 / 0
0.18.0 9 / 0
0.17.0 10 / 0
0.16.1 10 / 0
0.16.0 10 / 1
0.15.0 9 / 1
0.14.0 9 / 1
0.13.2 9 / 1
0.13.1 9 / 1
0.13.0 9 / 1
0.12.3 9 / 1
0.12.2 10 / 0
0.12.1 10 / 0
0.12.0 10 / 0
0.11.1 9 / 0
0.11.0 9 / 0
0.10.6 9 / 0
0.10.5 9 / 0
0.10.4 8 / 0
0.10.3 8 / 0
0.10.2 8 / 0
0.10.1 8 / 0
0.10.0 8 / 0
0.9.2 8 / 4
0.9.1 9 / 4
0.9.0 7 / 4
0.8.6 7 / 4
0.8.5 7 / 4
0.8.4 7 / 4
0.8.3 7 / 4
0.8.2 4 / 4
0.8.1 4 / 4
0.8.0 6 / 6
0.7.4 6 / 6
0.7.3 6 / 6
0.7.2 5 / 6
0.7.1 5 / 6
0.7.0 5 / 6
0.6.2 4 / 6
0.6.1 4 / 6
0.6.0 4 / 6
0.5.1 4 / 6
0.5.0 4 / 3
0.4.0 3 / 3

v0.19.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.19.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.18.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.17.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.16.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.16.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.15.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.13.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.13.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.13.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.12.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.12.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.12.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.12.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.11.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.11.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.10.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.10.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.10.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.10.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.10.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.10.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.10.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.8.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.8.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.8.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.8.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.8.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.8.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.8.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.5.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.