← Home

@swc/cli

npm Repository Homepage

CLI for the swc project

51
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

kdy1

Keywords

swcclibabeles6transpiletranspilercompilerjavascript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
install-scripts install-script:postinstall AI (install-scripts): Postinstall is a simple echo announcement about the new swcx command. No code execution or network access; purely informational and safe for this package. ai
phantom-deps phantom-dep:@xhmikosr/bin-wrapper AI (phantom-deps): CLI tool dependency used indirectly; phantom-deps false positive for this package type. ai
phantom-deps phantom-dep:semver AI (phantom-deps): CLI tool dependency used indirectly; phantom-deps false positive for this package type. ai
phantom-deps phantom-dep:piscina AI (phantom-deps): CLI tool dependency used indirectly; phantom-deps false positive for this package type. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool dependency used indirectly; phantom-deps false positive for this package type. ai
phantom-deps phantom-dep:fast-glob AI (phantom-deps): CLI tool dependency used indirectly; phantom-deps false positive for this package type. ai
phantom-deps phantom-dep:minimatch AI (phantom-deps): CLI tool dependency used indirectly; phantom-deps false positive for this package type. ai
phantom-deps phantom-dep:source-map AI (phantom-deps): CLI tool dependency used indirectly; phantom-deps false positive for this package type. ai
phantom-deps phantom-dep:slash AI (phantom-deps): CLI tool dependency used indirectly; phantom-deps false positive for this package type. ai
typosquat typosquat.levenshtein:joi AI (typosquat): @swc/cli is the official SWC project CLI, not a typosquat of joi. The name similarity is coincidental and the packages are entirely unrelated. ai
semgrep semgrep:child-process-import AI (semgrep): @swc/cli is a CLI wrapper for the SWC compiler binary; child_process usage to invoke native binaries is expected and documented behavior. ai
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require is used to read the local package.json to detect @swc/core peer dependency version — a standard CLI compatibility check pattern. ai
phantom-deps phantom-dep:@swc/counter AI (phantom-deps): @swc/counter is a same-org utility used across the SWC ecosystem; phantom dep finding is a false positive for this package. ai
maintainer-change maintainer-removed AI (maintainer-change): Maintainer removal coincides with transition to GitHub Actions publishing with SLSA attestation; consistent with legitimate automation of the release process. ai
provenance publisher-changed AI (provenance): Publisher changed to GitHub Actions with SLSA provenance attestation — this is a legitimate and encouraged move to automated CI/CD publishing under the official swc-project org. ai

Versions (showing 51 of 83)

View all versions
Version Deps Published
0.8.1 9 / 12
0.8.0 9 / 12
0.7.10 9 / 12
0.7.9 9 / 12
0.7.8 9 / 12
0.7.7 9 / 12
0.7.5 9 / 12
0.7.4 9 / 12
0.7.3 9 / 12
0.7.2 9 / 12
0.7.1 9 / 12
0.6.0 9 / 12
0.5.2 9 / 12
0.5.1 9 / 12
0.5.0 9 / 12
0.4.0 9 / 12
0.3.14 9 / 12
0.3.13 9 / 12
0.3.12 9 / 11
0.3.11 9 / 11
0.3.10 9 / 11
0.3.9 9 / 11
0.3.6 8 / 11
0.3.5 8 / 14
0.3.4 8 / 14
0.3.2 8 / 14
0.3.1 8 / 14
0.3.0 8 / 14
0.2.3 8 / 14
0.2.2 8 / 14
0.2.1 8 / 14
0.2.0 8 / 14
0.1.65 7 / 14
0.1.64 7 / 14
0.1.63 6 / 14
0.1.62 6 / 14
0.1.61 6 / 14
0.1.60 6 / 14
0.1.59 6 / 14
0.1.58 6 / 14
0.1.57 4 / 13
0.1.56 4 / 13
0.1.55 4 / 13
0.1.54 5 / 14
0.1.53 5 / 11
0.1.52 4 / 10
0.1.51 4 / 10
0.1.50 4 / 10
0.1.49 4 / 10
0.1.48 4 / 10
0.1.46 4 / 8