← Home

@teambit/host-initializer

100
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

teambit-ownershohamgiladdavidfirstranm8guysaaritaymendelerezbitjoshk2redigmayona007

Keywords

bitbit-aspectbit-core-aspectcomponentscollaborationweb

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern new-deps-added AI (publish-pattern): New dep is an official first-party @teambit package, consistent with monorepo pattern. ai
publish-pattern rapid-publish AI (publish-pattern): teambit publishes many packages simultaneously via automated CI; rapid publish is a stable pattern for this org. ai
provenance no-provenance AI (provenance): Established package; provenance is a best-practice recommendation, not a blocker for this mature project. ai
dependencies unvetted-dep:@teambit/harmony AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/objects AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/bit-error AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/config-store AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/legacy.scope AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/legacy.utils AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/legacy.bit-map AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/legacy.consumer AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/cli AI (dependencies): Sibling @teambit/* package from the same monorepo; unvetted status is a registry coverage gap, not a risk. ai
dependencies unvetted-dep:@teambit/legacy.scope-api AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/component.sources AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/mcp.mcp-config-writer AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/toolbox.string.random AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/toolbox.fs.is-dir-empty AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/scope.modules.find-scope-path AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/workspace.modules.workspace-locator AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
npm-metadata no-description AI (npm-metadata): Bit ecosystem packages consistently omit npm descriptions; not a malware indicator here. ai
dependencies unvetted-dep:@teambit/legacy.constants AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/config AI (dependencies): Sibling @teambit/* package from the same monorepo. ai
dependencies unvetted-dep:@teambit/logger AI (dependencies): Sibling @teambit/* package from the same monorepo. ai

Versions (showing 100 of 192)

Version Deps Published
0.0.778 24 / 3
0.0.773 24 / 3
0.0.771 24 / 3
0.0.746 23 / 3
0.0.745 23 / 3
0.0.744 23 / 3
0.0.743 23 / 3
0.0.742 23 / 3
0.0.739 23 / 3
0.0.738 23 / 3
0.0.737 23 / 3
0.0.736 23 / 3
0.0.735 23 / 3
0.0.734 23 / 3
0.0.733 23 / 3
0.0.732 23 / 3
0.0.731 23 / 3
0.0.730 23 / 3
0.0.729 23 / 3
0.0.728 23 / 3
0.0.727 23 / 3
0.0.726 23 / 3
0.0.725 23 / 3
0.0.724 23 / 3
0.0.723 23 / 3
0.0.722 23 / 3
0.0.721 23 / 3
0.0.720 23 / 3
0.0.719 23 / 3
0.0.718 23 / 3
0.0.717 23 / 3
0.0.716 23 / 3
0.0.715 23 / 3
0.0.714 23 / 3
0.0.713 23 / 3
0.0.712 23 / 3
0.0.711 23 / 3
0.0.710 23 / 3
0.0.709 23 / 3
0.0.708 23 / 3
0.0.707 23 / 3
0.0.706 23 / 3
0.0.705 23 / 3
0.0.704 23 / 3
0.0.703 23 / 3
0.0.702 23 / 3
0.0.701 23 / 3
0.0.700 23 / 3
0.0.699 23 / 3
0.0.696 23 / 3
0.0.695 23 / 3
0.0.692 23 / 3
0.0.689 23 / 3
0.0.688 23 / 3
0.0.687 23 / 3
0.0.686 23 / 3
0.0.685 23 / 3
0.0.684 23 / 3
0.0.683 23 / 3
0.0.682 23 / 3
0.0.681 23 / 3
0.0.652 23 / 3
0.0.638 23 / 3
0.0.637 23 / 3
0.0.636 23 / 3
0.0.635 23 / 3
0.0.634 23 / 3
0.0.633 23 / 3
0.0.632 23 / 3
0.0.631 23 / 3
0.0.630 23 / 3
0.0.629 23 / 3
0.0.628 23 / 3
0.0.627 23 / 3
0.0.626 23 / 3
0.0.625 23 / 3
0.0.624 23 / 3
0.0.623 23 / 3
0.0.622 23 / 3
0.0.620 23 / 3
0.0.619 23 / 3
0.0.618 23 / 3
0.0.617 23 / 3
0.0.616 23 / 3
0.0.615 23 / 3
0.0.614 23 / 3
0.0.613 23 / 3
0.0.612 23 / 3
0.0.611 23 / 3
0.0.610 23 / 3
0.0.609 23 / 3
0.0.608 23 / 3
0.0.607 23 / 3
0.0.606 23 / 3
0.0.605 23 / 3
0.0.604 23 / 3
0.0.603 23 / 3
0.0.602 23 / 3
0.0.601 23 / 3
0.0.600 23 / 3
Showing 100 of 192 Next page →

v0.0.778

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.773

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.771

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.