← Home

@teambit/envs

npm Repository Homepage
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

teambit-ownershohamgiladdavidfirstranm8guysaaritaymendelerezbitjoshk2redigmayona007

Keywords

bitbit-aspectbit-core-aspectcomponentscollaborationweb

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern rapid-publish AI (publish-pattern): teambit publishes many packages simultaneously in lockstep; rapid publish is a normal release pattern for this monorepo. ai
dependencies unvetted-dep:@teambit/harmony AI (dependencies): Internal @teambit monorepo dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/bit-error AI (dependencies): Internal @teambit monorepo dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/cli-table AI (dependencies): Internal @teambit monorepo dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/component-id AI (dependencies): Internal @teambit monorepo dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/component-issues AI (dependencies): Internal @teambit monorepo dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/legacy.consumer-component AI (dependencies): Internal @teambit monorepo dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/toolbox.array.duplications-finder AI (dependencies): Internal @teambit monorepo dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/component.sources AI (dependencies): Internal @teambit monorepo dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/legacy.extension-data AI (dependencies): Internal @teambit monorepo dep; stable pattern across all versions of this package. ai
npm-metadata no-description AI (npm-metadata): Bit aspect packages consistently omit npm descriptions; stable pattern across all @teambit/* packages. ai
provenance no-provenance AI (provenance): Teambit does not publish with Sigstore provenance; consistent across all 2844 versions. ai

Versions (showing 51 of 218)

View all versions
Version Deps Published
1.0.1060 36 / 4
1.0.1033 36 / 4
1.0.1032 36 / 4
1.0.1031 36 / 4
1.0.1030 36 / 4
1.0.1029 36 / 4
1.0.1026 36 / 4
1.0.1025 36 / 4
1.0.1024 36 / 4
1.0.1023 36 / 4
1.0.1022 36 / 4
1.0.1021 36 / 4
1.0.1020 36 / 4
1.0.1019 36 / 4
1.0.1018 36 / 4
1.0.1017 36 / 4
1.0.1016 36 / 4
1.0.1015 36 / 4
1.0.1014 36 / 4
1.0.1013 36 / 4
1.0.1012 36 / 4
1.0.1011 36 / 4
1.0.1010 36 / 4
1.0.1009 36 / 4
1.0.1008 36 / 4
1.0.1007 36 / 4
1.0.1006 36 / 4
1.0.1005 36 / 4
1.0.1004 36 / 4
1.0.1003 36 / 4
1.0.1002 36 / 4
1.0.1001 36 / 4
1.0.1000 36 / 4
1.0.999 36 / 4
1.0.998 36 / 4
1.0.997 36 / 4
1.0.996 36 / 4
1.0.995 36 / 4
1.0.994 36 / 4
1.0.987 36 / 4
1.0.975 36 / 4
1.0.974 36 / 4
1.0.973 36 / 4
1.0.972 36 / 4
1.0.971 36 / 4
1.0.970 36 / 4
1.0.969 36 / 4
1.0.968 36 / 4
1.0.967 36 / 4
1.0.966 36 / 4
1.0.965 36 / 4

v1.0.1060

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.