← Home

@stacksjs/stx

npm Repository Homepage
61
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

chrisbreuerglenn123

Keywords

bladecssbunstxplugingenerationtypescriptstacks

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:craft-native AI (phantom-deps): Platform-specific binary package, not expected to be directly imported. ai
dependencies unvetted-dep:craft-native AI (dependencies): Native binary companion package from same publisher ecosystem, replacing prior craft dep. ai
publish-pattern rapid-publish AI (publish-pattern): Normal fast-cadence monorepo release pattern, no other malicious signal. ai
dependencies unvetted-dep:ts-images AI (dependencies): Sibling stacksjs-ecosystem package, expected dependency. ai
source-diff obfuscated-file:dist/strict-lint.js AI (source-diff): Bun-bundled output (// @bun header); minification is expected for this build-tool package. ai
source-diff obfuscated-file:dist/doctor.js AI (source-diff): Bun-bundled output (// @bun header); minification is expected for this build-tool package. ai
source-diff obfuscated-file:dist/index.js AI (source-diff): Bun-bundled output for library entry point; readable domain logic visible in sample. ai
source-diff net-exec-file:dist/index.js AI (source-diff): Bundled UI framework library; network+exec from bundled dependencies, not malicious. ai
source-diff net-exec-file:dist/cli.js AI (source-diff): CLI tool with bundled deps; network+exec pattern is normal for a build/dev tool. ai
source-diff obfuscated-file:dist/cli.js AI (source-diff): Bun-bundled output for CLI entry point; readable domain logic visible in sample. ai
source-diff net-exec-file:dist/chunk-2ndtnc0t.js AI (source-diff): new Function() in template evaluator is standard for UI frameworks; not malicious. ai
phantom-deps phantom-dep:@stacksjs/markdown AI (phantom-deps): Same-org monorepo dep; used via config/plugin wiring rather than direct import. ai
phantom-deps phantom-dep:@stacksjs/headwind AI (phantom-deps): Same-org monorepo dep; used via config/plugin wiring rather than direct import. ai
phantom-deps phantom-dep:@stacksjs/desktop AI (phantom-deps): Same-org monorepo dep; used via config/plugin wiring rather than direct import. ai
phantom-deps phantom-dep:bunfig AI (phantom-deps): Referenced in config files; Bun config utility, not a direct import. ai
phantom-deps phantom-dep:@cwcss/crosswind AI (phantom-deps): Config-file reference in build tool; stable pattern for this package. ai
phantom-deps phantom-dep:bun-plugin-stx AI (phantom-deps): Config-file reference in build tool; stable pattern for this package. ai
phantom-deps phantom-dep:@stacksjs/clapp AI (phantom-deps): Same-org dependency; stable pattern for this package. ai
phantom-deps phantom-dep:ts-syntax-highlighter AI (phantom-deps): Config-file reference in build tool; stable pattern for this package. ai
phantom-deps phantom-dep:@stacksjs/sanitizer AI (phantom-deps): Same-org dependency; stable pattern for this package. ai
phantom-deps phantom-dep:@stacksjs/ts-craft AI (phantom-deps): Same-org dependency; stable pattern for this package. ai

Versions (showing 61 of 61)

Version Deps Published
0.2.107 10 / 0
0.2.90 11 / 0
0.2.89 11 / 0
0.2.88 11 / 0
0.2.86 11 / 0
0.2.72 12 / 0
0.2.63 11 / 0
0.2.53 11 / 0
0.2.50 10 / 0
0.2.48 10 / 0
0.2.47 10 / 0
0.2.46 10 / 0
0.2.45 10 / 0
0.2.44 10 / 0
0.2.43 10 / 0
0.2.42 10 / 0
0.2.41 10 / 0
0.2.40 10 / 0
0.2.39 10 / 0
0.2.38 10 / 0
0.2.37 10 / 0
0.2.36 10 / 0
0.2.35 10 / 0
0.2.33 10 / 0
0.2.32 10 / 0
0.2.31 10 / 0
0.2.30 10 / 0
0.2.29 10 / 0
0.2.28 10 / 0
0.2.26 10 / 0
0.2.24 10 / 0
0.2.21 10 / 0
0.2.20 10 / 0
0.2.19 10 / 0
0.2.18 10 / 0
0.2.17 10 / 0
0.2.16 10 / 0
0.2.15 10 / 0
0.2.14 10 / 0
0.2.13 10 / 0
0.2.12 10 / 0
0.2.11 10 / 0
0.2.10 9 / 0
0.2.9 9 / 0
0.2.8 9 / 0
0.2.6 6 / 0
0.2.5 6 / 0
0.2.4 6 / 0
0.2.3 6 / 0
0.2.0 8 / 0
0.1.16 7 / 0
0.1.12 7 / 0
0.1.11 7 / 0
0.1.10 7 / 0
0.1.9 7 / 0
0.1.8 7 / 0
0.1.7 7 / 0
0.1.6 7 / 0
0.0.10 2 / 0
0.0.9 2 / 0
0.0.7 2 / 0

v0.2.107

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.90

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.89

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.88

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.86

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.63

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.