@taiga-ui/eslint-plugin-experience-next
An ESLint plugin to enforce a consistent code styles across taiga-ui projects
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:globals | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:angular-eslint | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:@eslint/markdown | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-jest | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-compat | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-import | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-regexp | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-cypress | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-promise | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-sonarjs | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-unicorn | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-config-prettier | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-prettier | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-de-morgan | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:@stylistic/eslint-plugin | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-playwright | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-package-json | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-file-progress | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-perfectionist | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-unused-imports | AI (phantom-deps): ESLint config package; plugins referenced in config objects, not direct imports — stable FP for this package. | ai |
Versions (showing 28 of 229)
| Version | Deps | Published |
|---|---|---|
| 0.312.0 | 0 / 2 | |
| 0.311.0 | 0 / 2 | |
| 0.301.0 | 0 / 1 | |
| 0.300.0 | 0 / 1 | |
| 0.299.0 | 0 / 1 | |
| 0.298.0 | 0 / 1 | |
| 0.297.0 | 0 / 1 | |
| 0.296.0 | 0 / 1 | |
| 0.295.0 | 0 / 1 | |
| 0.294.0 | 0 / 1 | |
| 0.293.0 | 0 / 1 | |
| 0.292.0 | 0 / 1 | |
| 0.291.0 | 0 / 1 | |
| 0.290.0 | 0 / 1 | |
| 0.289.0 | 0 / 1 | |
| 0.288.0 | 0 / 1 | |
| 0.287.0 | 0 / 1 | |
| 0.286.0 | 0 / 0 | |
| 0.285.0 | 0 / 0 | |
| 0.284.0 | 0 / 0 | |
| 0.283.0 | 0 / 0 | |
| 0.282.0 | 0 / 0 | |
| 0.281.0 | 0 / 0 | |
| 0.280.0 | 0 / 0 | |
| 0.279.0 | 0 / 0 | |
| 0.278.0 | 0 / 0 | |
| 0.277.0 | 0 / 0 | |
| 0.276.0 | 0 / 0 |
v0.312.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.311.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.301.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.300.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.299.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.298.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.297.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.296.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.295.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.294.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.293.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.292.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.291.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.290.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.289.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.288.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.287.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.286.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.285.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.284.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.283.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.282.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.281.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.280.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.279.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.278.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.277.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.276.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.