← Home

@teambit/scope

npm Repository Homepage
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

teambit-ownershohamgiladdavidfirstranm8guysaaritaymendelerezbitjoshk2redigmayona007

Keywords

bitbit-aspectbit-core-aspectcomponentscollaborationweb

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern rapid-publish AI (publish-pattern): Monorepo CI publishes many packages in lockstep every few minutes; expected cadence for @teambit/*. ai
publish-pattern new-deps-added AI (publish-pattern): New dep is a first-party @teambit scoped package; consistent with org's modular component pattern. ai
maintainer-change maintainer-removed AI (maintainer-change): Large teambit org package with frequent releases; maintainer roster changes are routine internal team management. ai
npm-metadata no-description AI (npm-metadata): Monorepo component; description often omitted in internal packages. ai
provenance no-provenance AI (provenance): Established package; provenance absence is not a blocker for trusted publishers. ai
dependencies unvetted-dep:@teambit/harmony.modules.load-trace AI (dependencies): First-party @teambit org package; consistent with established teambit module pattern. ai
dependencies unvetted-dep:@teambit/legacy.constants AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/legacy.scope-api AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/bit.get-bit-version AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/scope.remote-actions AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/component.snap-distance AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/legacy.consumer-component AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/harmony.modules.in-memory-cache AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/pkg.modules.component-package-name AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/legacy.extension-data AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/legacy.scope AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/scope.network AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/scope.remotes AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/scopes.scope-id AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
dependencies unvetted-dep:@teambit/graph.cleargraph AI (dependencies): Same-org teambit dependency; structural pattern across all teambit packages. ai
phantom-deps phantom-dep:@teambit/compiler AI (phantom-deps): Same-org teambit monorepo; phantom-dep heuristic is unreliable for this package's component-based publishing model. ai
phantom-deps phantom-dep:@teambit/ui-foundation.ui.constants.z-indexes AI (phantom-deps): Same-org teambit monorepo; phantom-dep heuristic is unreliable for this package's component-based publishing model. ai

Versions (showing 51 of 137)

View all versions
Version Deps Published
1.0.1070 88 / 8
1.0.1064 88 / 8
1.0.1060 88 / 8
1.0.1051 88 / 8
1.0.1019 88 / 8
1.0.1008 87 / 8
1.0.1000 87 / 8
1.0.991 87 / 8
1.0.982 87 / 8
1.0.981 87 / 8
1.0.980 87 / 8
1.0.979 87 / 8
1.0.978 87 / 8
1.0.977 87 / 8
1.0.976 87 / 8
1.0.975 87 / 8
1.0.974 87 / 8
1.0.972 87 / 8
1.0.971 87 / 8
1.0.970 87 / 8
1.0.969 87 / 8
1.0.968 87 / 8
1.0.967 87 / 8
1.0.966 87 / 8
1.0.965 87 / 8
1.0.964 87 / 8
1.0.962 87 / 8
1.0.958 87 / 8
1.0.949 87 / 8
1.0.942 87 / 8
1.0.938 87 / 8
1.0.935 87 / 8
1.0.934 87 / 8
1.0.933 87 / 8
1.0.932 87 / 8
1.0.931 87 / 8
1.0.930 87 / 8
1.0.929 87 / 8
1.0.926 87 / 8
1.0.923 87 / 8
1.0.922 87 / 8
1.0.921 87 / 8
1.0.919 87 / 8
1.0.916 87 / 8
1.0.915 87 / 8
1.0.914 87 / 8
1.0.913 87 / 8
1.0.912 87 / 8
1.0.911 87 / 8
1.0.910 87 / 8
1.0.909 87 / 8

v1.0.1070

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.1064

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.1060

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.1051

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.