@stacksjs/stx
51
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
chrisbreuerglenn123
Keywords
bladecssbunstxplugingenerationtypescriptstacks
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:craft-native | AI (phantom-deps): Platform-specific binary package, not expected to be directly imported. | ai | |
| dependencies | unvetted-dep:craft-native | AI (dependencies): Native binary companion package from same publisher ecosystem, replacing prior craft dep. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): Normal fast-cadence monorepo release pattern, no other malicious signal. | ai | |
| dependencies | unvetted-dep:ts-images | AI (dependencies): Sibling stacksjs-ecosystem package, expected dependency. | ai | |
| source-diff | obfuscated-file:dist/strict-lint.js | AI (source-diff): Bun-bundled output (// @bun header); minification is expected for this build-tool package. | ai | |
| source-diff | obfuscated-file:dist/doctor.js | AI (source-diff): Bun-bundled output (// @bun header); minification is expected for this build-tool package. | ai | |
| source-diff | obfuscated-file:dist/index.js | AI (source-diff): Bun-bundled output for library entry point; readable domain logic visible in sample. | ai | |
| source-diff | net-exec-file:dist/index.js | AI (source-diff): Bundled UI framework library; network+exec from bundled dependencies, not malicious. | ai | |
| source-diff | net-exec-file:dist/cli.js | AI (source-diff): CLI tool with bundled deps; network+exec pattern is normal for a build/dev tool. | ai | |
| source-diff | obfuscated-file:dist/cli.js | AI (source-diff): Bun-bundled output for CLI entry point; readable domain logic visible in sample. | ai | |
| source-diff | net-exec-file:dist/chunk-2ndtnc0t.js | AI (source-diff): new Function() in template evaluator is standard for UI frameworks; not malicious. | ai | |
| phantom-deps | phantom-dep:@stacksjs/markdown | AI (phantom-deps): Same-org monorepo dep; used via config/plugin wiring rather than direct import. | ai | |
| phantom-deps | phantom-dep:@stacksjs/headwind | AI (phantom-deps): Same-org monorepo dep; used via config/plugin wiring rather than direct import. | ai | |
| phantom-deps | phantom-dep:@stacksjs/desktop | AI (phantom-deps): Same-org monorepo dep; used via config/plugin wiring rather than direct import. | ai | |
| phantom-deps | phantom-dep:bunfig | AI (phantom-deps): Referenced in config files; Bun config utility, not a direct import. | ai | |
| phantom-deps | phantom-dep:@cwcss/crosswind | AI (phantom-deps): Config-file reference in build tool; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:bun-plugin-stx | AI (phantom-deps): Config-file reference in build tool; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@stacksjs/clapp | AI (phantom-deps): Same-org dependency; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:ts-syntax-highlighter | AI (phantom-deps): Config-file reference in build tool; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@stacksjs/sanitizer | AI (phantom-deps): Same-org dependency; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@stacksjs/ts-craft | AI (phantom-deps): Same-org dependency; stable pattern for this package. | ai |
Versions (showing 51 of 61)
| Version | Deps | Published |
|---|---|---|
| 0.2.107 | 10 / 0 | |
| 0.2.90 | 11 / 0 | |
| 0.2.89 | 11 / 0 | |
| 0.2.88 | 11 / 0 | |
| 0.2.86 | 11 / 0 | |
| 0.2.72 | 12 / 0 | |
| 0.2.63 | 11 / 0 | |
| 0.2.53 | 11 / 0 | |
| 0.2.50 | 10 / 0 | |
| 0.2.48 | 10 / 0 | |
| 0.2.47 | 10 / 0 | |
| 0.2.46 | 10 / 0 | |
| 0.2.45 | 10 / 0 | |
| 0.2.44 | 10 / 0 | |
| 0.2.43 | 10 / 0 | |
| 0.2.42 | 10 / 0 | |
| 0.2.41 | 10 / 0 | |
| 0.2.40 | 10 / 0 | |
| 0.2.39 | 10 / 0 | |
| 0.2.38 | 10 / 0 | |
| 0.2.37 | 10 / 0 | |
| 0.2.36 | 10 / 0 | |
| 0.2.35 | 10 / 0 | |
| 0.2.33 | 10 / 0 | |
| 0.2.32 | 10 / 0 | |
| 0.2.31 | 10 / 0 | |
| 0.2.30 | 10 / 0 | |
| 0.2.29 | 10 / 0 | |
| 0.2.28 | 10 / 0 | |
| 0.2.26 | 10 / 0 | |
| 0.2.24 | 10 / 0 | |
| 0.2.21 | 10 / 0 | |
| 0.2.20 | 10 / 0 | |
| 0.2.19 | 10 / 0 | |
| 0.2.18 | 10 / 0 | |
| 0.2.17 | 10 / 0 | |
| 0.2.16 | 10 / 0 | |
| 0.2.15 | 10 / 0 | |
| 0.2.14 | 10 / 0 | |
| 0.2.13 | 10 / 0 | |
| 0.2.12 | 10 / 0 | |
| 0.2.11 | 10 / 0 | |
| 0.2.10 | 9 / 0 | |
| 0.2.9 | 9 / 0 | |
| 0.2.8 | 9 / 0 | |
| 0.2.6 | 6 / 0 | |
| 0.2.5 | 6 / 0 | |
| 0.2.4 | 6 / 0 | |
| 0.2.3 | 6 / 0 | |
| 0.2.0 | 8 / 0 | |
| 0.1.16 | 7 / 0 |
v0.2.107
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.90
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.89
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.88
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.86
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2.63
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.