← Home

@storm-software/esbuild

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

esbuildmonorepostormstorm-opsstorm-stacksullivanpj

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:prettier-plugin-organize-imports AI (phantom-deps): Prettier plugin referenced via config, not direct import; stable false positive. ai
semgrep semgrep:dynamic-require AI (semgrep): Reads project package.json by path to enumerate deps; standard build-tool pattern, not arbitrary module loading. ai
phantom-deps phantom-dep:source-map AI (phantom-deps): Build toolchain dep used transitively via config; stable false positive for this package. ai
phantom-deps phantom-dep:prettier-plugin-sh AI (phantom-deps): Prettier plugin referenced via config, not direct import; stable false positive. ai
phantom-deps phantom-dep:prettier-plugin-pkg AI (phantom-deps): Prettier plugin referenced via config, not direct import; stable false positive. ai
provenance publisher-changed AI (provenance): Transition from stormie-bot to GitHub Actions CI is a documented automation migration; SLSA provenance attestation confirms integrity. ai
dependencies unvetted-dep:@nx/js AI (dependencies): @nx/js is a mainstream Nx toolchain package; stable false positive for this build-tools package. ai
phantom-deps phantom-dep:globby AI (phantom-deps): Globby used in config/build scripts; stable false positive for this package. ai
phantom-deps phantom-dep:@nx/js AI (phantom-deps): Config-file reference pattern for Nx tooling; stable false positive for this build-tools package. ai

Versions (showing 51 of 609)

View all versions
Version Deps Published
0.53.269 12 / 2
0.53.268 12 / 2
0.53.267 12 / 2
0.53.266 12 / 2
0.53.265 12 / 2
0.53.262 12 / 2
0.53.260 12 / 2
0.53.259 12 / 2
0.53.253 12 / 2
0.53.252 12 / 2
0.53.251 12 / 2
0.53.250 12 / 2
0.53.247 12 / 2
0.53.246 12 / 2
0.53.245 12 / 2
0.53.244 12 / 2
0.53.243 12 / 2
0.53.242 12 / 2
0.53.241 12 / 2
0.53.240 12 / 2
0.53.239 12 / 2
0.53.238 12 / 2
0.53.237 12 / 2
0.53.236 12 / 2
0.53.235 12 / 2
0.53.234 12 / 2
0.53.233 12 / 2
0.53.232 12 / 2
0.53.231 12 / 2
0.53.230 12 / 2
0.53.229 12 / 2
0.53.228 12 / 2
0.53.227 12 / 2
0.53.226 12 / 2
0.53.225 12 / 2
0.53.224 12 / 2
0.53.223 12 / 2
0.53.222 12 / 2
0.53.221 12 / 2
0.53.220 12 / 2
0.53.219 12 / 2
0.53.218 12 / 2
0.53.217 12 / 2
0.53.216 12 / 2
0.53.215 12 / 2
0.53.214 12 / 2
0.53.213 12 / 2
0.53.212 12 / 2
0.53.211 12 / 2
0.53.210 12 / 2
0.53.209 12 / 2

v0.53.269

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.268

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.267

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.266

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.265

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.262

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.260

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.259

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.253

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.252

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.251

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.250

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.247

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.246

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.245

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.244

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.243

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.242

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.241

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.240

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.