@taiga-ui/release-it-config
Taiga UI release-it config
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): splincode is a listed contributor in package.json; transition appears legitimate within the taiga-family org. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Tiny config-only package by design; short README and small payload are expected for a release-it config wrapper. | ai |
Versions (showing 51 of 380)
| Version | Deps | Published |
|---|---|---|
| 0.554.0 | 0 / 0 | |
| 0.553.0 | 0 / 0 | |
| 0.552.0 | 0 / 0 | |
| 0.551.0 | 0 / 0 | |
| 0.550.0 | 0 / 0 | |
| 0.549.0 | 0 / 0 | |
| 0.548.0 | 0 / 0 | |
| 0.547.0 | 0 / 0 | |
| 0.546.0 | 0 / 0 | |
| 0.545.0 | 0 / 0 | |
| 0.544.0 | 0 / 0 | |
| 0.543.0 | 0 / 0 | |
| 0.542.0 | 0 / 0 | |
| 0.541.0 | 0 / 0 | |
| 0.540.0 | 0 / 0 | |
| 0.539.0 | 0 / 0 | |
| 0.538.0 | 0 / 0 | |
| 0.537.0 | 0 / 0 | |
| 0.536.0 | 0 / 0 | |
| 0.535.0 | 0 / 0 | |
| 0.534.0 | 0 / 0 | |
| 0.533.0 | 0 / 0 | |
| 0.532.0 | 0 / 0 | |
| 0.531.0 | 0 / 0 | |
| 0.530.0 | 0 / 0 | |
| 0.529.0 | 0 / 0 | |
| 0.528.0 | 0 / 0 | |
| 0.527.0 | 0 / 0 | |
| 0.526.0 | 0 / 0 | |
| 0.525.0 | 0 / 0 | |
| 0.524.0 | 0 / 0 | |
| 0.523.0 | 0 / 0 | |
| 0.522.0 | 0 / 0 | |
| 0.521.0 | 0 / 0 | |
| 0.520.0 | 0 / 0 | |
| 0.519.0 | 0 / 0 | |
| 0.518.0 | 0 / 0 | |
| 0.517.0 | 0 / 0 | |
| 0.516.0 | 0 / 0 | |
| 0.515.0 | 0 / 0 | |
| 0.514.0 | 0 / 0 | |
| 0.513.0 | 0 / 0 | |
| 0.512.0 | 0 / 0 | |
| 0.511.0 | 0 / 0 | |
| 0.510.0 | 0 / 0 | |
| 0.509.0 | 0 / 0 | |
| 0.508.0 | 0 / 0 | |
| 0.507.0 | 0 / 0 | |
| 0.506.0 | 0 / 0 | |
| 0.505.0 | 0 / 0 | |
| 0.504.0 | 0 / 0 |
v0.554.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.553.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.552.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.551.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.550.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.549.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.548.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.547.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.546.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.