← Home

@storm-software/esbuild

npm Repository Homepage
100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

esbuildmonorepostormstorm-opsstorm-stacksullivanpj

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:prettier-plugin-organize-imports AI (phantom-deps): Prettier plugin referenced via config, not direct import; stable false positive. ai
semgrep semgrep:dynamic-require AI (semgrep): Reads project package.json by path to enumerate deps; standard build-tool pattern, not arbitrary module loading. ai
phantom-deps phantom-dep:source-map AI (phantom-deps): Build toolchain dep used transitively via config; stable false positive for this package. ai
phantom-deps phantom-dep:prettier-plugin-sh AI (phantom-deps): Prettier plugin referenced via config, not direct import; stable false positive. ai
phantom-deps phantom-dep:prettier-plugin-pkg AI (phantom-deps): Prettier plugin referenced via config, not direct import; stable false positive. ai
provenance publisher-changed AI (provenance): Transition from stormie-bot to GitHub Actions CI is a documented automation migration; SLSA provenance attestation confirms integrity. ai
dependencies unvetted-dep:@nx/js AI (dependencies): @nx/js is a mainstream Nx toolchain package; stable false positive for this build-tools package. ai
phantom-deps phantom-dep:globby AI (phantom-deps): Globby used in config/build scripts; stable false positive for this package. ai
phantom-deps phantom-dep:@nx/js AI (phantom-deps): Config-file reference pattern for Nx tooling; stable false positive for this build-tools package. ai

Versions (showing 100 of 609)

Version Deps Published
0.53.269 12 / 2
0.53.268 12 / 2
0.53.267 12 / 2
0.53.266 12 / 2
0.53.265 12 / 2
0.53.262 12 / 2
0.53.260 12 / 2
0.53.259 12 / 2
0.53.253 12 / 2
0.53.252 12 / 2
0.53.251 12 / 2
0.53.250 12 / 2
0.53.247 12 / 2
0.53.246 12 / 2
0.53.245 12 / 2
0.53.244 12 / 2
0.53.243 12 / 2
0.53.242 12 / 2
0.53.241 12 / 2
0.53.240 12 / 2
0.53.239 12 / 2
0.53.238 12 / 2
0.53.237 12 / 2
0.53.236 12 / 2
0.53.235 12 / 2
0.53.234 12 / 2
0.53.233 12 / 2
0.53.232 12 / 2
0.53.231 12 / 2
0.53.230 12 / 2
0.53.229 12 / 2
0.53.228 12 / 2
0.53.227 12 / 2
0.53.226 12 / 2
0.53.225 12 / 2
0.53.224 12 / 2
0.53.223 12 / 2
0.53.222 12 / 2
0.53.221 12 / 2
0.53.220 12 / 2
0.53.219 12 / 2
0.53.218 12 / 2
0.53.217 12 / 2
0.53.216 12 / 2
0.53.215 12 / 2
0.53.214 12 / 2
0.53.213 12 / 2
0.53.212 12 / 2
0.53.211 12 / 2
0.53.210 12 / 2
0.53.209 12 / 2
0.53.208 12 / 2
0.53.207 12 / 2
0.53.206 12 / 2
0.53.205 12 / 2
0.53.204 12 / 2
0.53.203 12 / 2
0.53.202 12 / 2
0.53.201 12 / 2
0.53.200 12 / 2
0.53.199 12 / 2
0.53.198 12 / 2
0.53.197 12 / 2
0.53.196 12 / 2
0.53.195 12 / 2
0.53.194 12 / 2
0.53.193 12 / 2
0.53.192 12 / 2
0.53.191 12 / 2
0.53.190 12 / 2
0.53.189 12 / 2
0.53.188 12 / 2
0.53.187 12 / 2
0.53.186 12 / 2
0.53.185 12 / 2
0.53.184 12 / 2
0.53.183 12 / 2
0.53.182 12 / 2
0.53.181 12 / 2
0.53.180 12 / 2
0.53.179 12 / 2
0.53.178 12 / 2
0.53.177 12 / 2
0.53.176 12 / 2
0.53.175 12 / 3
0.53.174 12 / 3
0.53.172 12 / 3
0.53.171 12 / 3
0.53.170 12 / 3
0.53.169 12 / 3
0.53.168 12 / 3
0.53.167 12 / 3
0.53.166 12 / 3
0.53.163 12 / 3
0.53.162 12 / 3
0.53.161 12 / 3
0.53.160 12 / 3
0.53.159 12 / 3
0.53.158 12 / 3
0.53.157 12 / 3
Showing 100 of 609 Next page →

v0.53.269

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.268

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.267

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.266

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.265

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.262

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.260

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.259

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.253

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.252

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.251

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.250

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.247

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.246

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.245

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.244

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.243

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.242

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.241

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.53.240

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.