← Home

@teambit/objects

npm Repository Homepage
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

teambit-ownershohamgiladdavidfirstranm8guysaaritaymendelerezbitjoshk2redigmayona007

Keywords

bitbit-aspectbit-core-aspectcomponentscollaborationweb

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern rapid-publish AI (publish-pattern): Monorepo publishes hundreds of packages in lockstep; rapid sequential publishes are routine here. ai
dependencies unvetted-dep:@teambit/harmony.modules.feature-toggle AI (dependencies): First-party teambit package consistent with the rest of the dependency tree. ai
maintainer-change maintainer-removed AI (maintainer-change): Internal teambit team restructuring; publisher has 2317 approved packages and no rejections. ai
dependencies unvetted-dep:@teambit/toolbox.array.duplications-finder AI (dependencies): First-party @teambit scoped package from a well-established publisher; consistent with monorepo release pattern. ai
semgrep semgrep:dynamic-require AI (semgrep): User-configured hook path loaded at runtime; intentional plugin/hook loader pattern for this package. ai
dependencies unvetted-dep:@teambit/legacy.cli.error AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/legacy.constants AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/component.sources AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/bit.get-bit-version AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/toolbox.crypto.sha1 AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/semantics.doc-parser AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/legacy.extension-data AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/component.snap-distance AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/toolbox.promise.map-pool AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/legacy.consumer-component AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/pkg.modules.semver-helper AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/harmony.modules.concurrency AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/toolbox.fs.remove-empty-dir AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/harmony.modules.get-basic-log AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/harmony.modules.in-memory-cache AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/legacy.consumer-config AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/legacy.scope AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/legacy.utils AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/legacy.logger AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
dependencies unvetted-dep:@teambit/graph.cleargraph AI (dependencies): Internal @teambit monorepo dep from trusted publisher; stable pattern across versions. ai
npm-metadata no-description AI (npm-metadata): Bit monorepo component package; missing description is a consistent pattern across all @teambit/* packages. ai
provenance no-provenance AI (provenance): Established @teambit/* monorepo; no provenance is consistent across all versions of this package family. ai

Versions (showing 51 of 51)

Version Deps Published
0.0.571 42 / 5
0.0.561 42 / 5
0.0.528 42 / 5
0.0.520 42 / 5
0.0.503 42 / 5
0.0.496 42 / 5
0.0.495 42 / 5
0.0.489 42 / 5
0.0.488 42 / 5
0.0.487 42 / 5
0.0.486 42 / 5
0.0.485 42 / 5
0.0.484 42 / 5
0.0.483 42 / 5
0.0.479 42 / 5
0.0.478 42 / 5
0.0.477 42 / 5
0.0.476 42 / 5
0.0.475 42 / 5
0.0.473 42 / 5
0.0.472 42 / 5
0.0.470 42 / 5
0.0.468 42 / 5
0.0.466 42 / 5
0.0.465 42 / 5
0.0.464 42 / 5
0.0.463 42 / 5
0.0.461 42 / 5
0.0.459 42 / 5
0.0.458 42 / 5
0.0.456 42 / 5
0.0.454 42 / 5
0.0.452 42 / 5
0.0.450 42 / 5
0.0.448 42 / 5
0.0.446 42 / 5
0.0.443 42 / 5
0.0.442 42 / 5
0.0.440 42 / 5
0.0.439 42 / 5
0.0.438 42 / 5
0.0.436 42 / 5
0.0.434 42 / 5
0.0.432 42 / 5
0.0.255 41 / 5
0.0.253 41 / 5
0.0.180 42 / 5
0.0.174 42 / 5
0.0.157 42 / 5
0.0.127 43 / 5
0.0.120 43 / 5

v0.0.571

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.561

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.