← Home

@teambit/generator

npm Repository Homepage
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

teambit-ownershohamgiladdavidfirstranm8guysaaritaymendelerezbitjoshk2redigmayona007

Keywords

bitbit-aspectbit-core-aspectcomponentscollaborationweb

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern rapid-publish AI (publish-pattern): teambit publishes hundreds of coordinated packages via CI; rapid successive publishes are normal for this org. ai
publish-pattern new-deps-added AI (publish-pattern): New dep is a first-party @teambit scoped package; consistent with this package's established pattern of teambit dependencies. ai
dependencies unvetted-dep:@teambit/bit-error AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/component-id AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/legacy.scope AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/legacy-bit-id AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/git.modules.git-ignore AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/legacy.consumer-config AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/git.modules.git-executable AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/pkg.modules.component-package-name AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/legacy.constants AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@teambit/harmony AI (dependencies): Internal @teambit sibling dep; stable pattern across all versions of this package. ai
npm-metadata no-description AI (npm-metadata): Established monorepo package; missing description is a cosmetic issue, not a security signal. ai
provenance no-provenance AI (provenance): teambit publishes thousands of versions without provenance; consistent pattern across the monorepo. ai

Versions (showing 51 of 321)

View all versions
Version Deps Published
1.0.1061 39 / 5
1.0.1034 39 / 5
1.0.1033 39 / 5
1.0.1032 39 / 5
1.0.1031 39 / 5
1.0.1030 39 / 5
1.0.1027 39 / 5
1.0.1025 39 / 5
1.0.1022 39 / 5
1.0.1020 39 / 5
1.0.1019 39 / 5
1.0.1018 39 / 5
1.0.1017 39 / 5
1.0.1016 39 / 5
1.0.1015 39 / 5
1.0.1014 39 / 5
1.0.1013 39 / 5
1.0.1012 39 / 5
1.0.1011 39 / 5
1.0.1010 39 / 5
1.0.1009 39 / 5
1.0.1008 39 / 5
1.0.1007 39 / 5
1.0.1006 39 / 5
1.0.1005 39 / 5
1.0.1004 39 / 5
1.0.1003 39 / 5
1.0.1002 39 / 5
1.0.1001 39 / 5
1.0.1000 39 / 5
1.0.999 39 / 5
1.0.998 39 / 5
1.0.997 39 / 5
1.0.996 39 / 5
1.0.995 39 / 5
1.0.994 39 / 5
1.0.993 39 / 5
1.0.992 39 / 5
1.0.991 39 / 5
1.0.990 39 / 5
1.0.988 39 / 5
1.0.987 39 / 5
1.0.985 39 / 5
1.0.984 39 / 5
1.0.983 39 / 5
1.0.982 39 / 5
1.0.980 39 / 5
1.0.977 39 / 5
1.0.976 39 / 5
1.0.975 39 / 5
1.0.974 39 / 5

v1.0.1061

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.