← Home

@teambit/watcher

npm Repository Homepage
100
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

teambit-ownershohamgiladdavidfirstranm8guysaaritaymendelerezbitjoshk2redigmayona007

Keywords

bitbit-aspectbit-core-aspectcomponentscollaborationweb

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern rapid-publish AI (publish-pattern): teambit uses automated CI releases across many packages simultaneously; rapid publish is expected for this org. ai
maintainer-change maintainer-removed AI (maintainer-change): Established teambit org package with 2050 versions; maintainer removal is routine org hygiene, not a takeover signal. ai
npm-metadata no-description AI (npm-metadata): Established package with 2007 versions; missing description is stable pattern, not malware indicator. ai
provenance no-provenance AI (provenance): Provenance absence is cosmetic for established package; not a security blocker. ai
dependencies unvetted-dep:@teambit/harmony AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/workspace AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/ipc-events AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/component-id AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/config-store AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/legacy.scope AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/cli AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/legacy.logger AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/legacy.bit-map AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/legacy.consumer AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/legacy.constants AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/harmony.modules.send-server-sent-events AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
phantom-deps phantom-dep:@teambit/legacy.bit-map AI (phantom-deps): Same-org dep; phantom-dep heuristic unreliable for monorepo packages with indirect usage. ai
dependencies unvetted-dep:@teambit/legacy.utils AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/scope AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/logger AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai
dependencies unvetted-dep:@teambit/pubsub AI (dependencies): Same-org sibling dep from teambit/bit monorepo; expected pattern across all versions. ai

Versions (showing 100 of 272)

Version Deps Published
1.0.884 24 / 4
1.0.883 24 / 4
1.0.882 24 / 4
1.0.881 24 / 4
1.0.880 24 / 4
1.0.879 24 / 4
1.0.878 24 / 4
1.0.877 24 / 4
1.0.876 24 / 4
1.0.875 24 / 4
1.0.874 24 / 4
1.0.873 24 / 4
1.0.872 24 / 4
1.0.871 24 / 4
1.0.870 24 / 4
1.0.869 24 / 4
1.0.868 24 / 4
1.0.867 24 / 4
1.0.866 24 / 4
1.0.865 24 / 4
1.0.864 24 / 4
1.0.863 24 / 4
1.0.862 24 / 4
1.0.861 24 / 4
1.0.860 24 / 4
1.0.859 24 / 4
1.0.858 24 / 4
1.0.857 24 / 4
1.0.856 24 / 4
1.0.855 24 / 4
1.0.854 24 / 4
1.0.853 24 / 4
1.0.852 24 / 4
1.0.851 24 / 4
1.0.850 24 / 4
1.0.849 24 / 4
1.0.848 24 / 4
1.0.847 24 / 4
1.0.846 24 / 4
1.0.845 24 / 4
1.0.844 24 / 4
1.0.843 24 / 4
1.0.842 24 / 4
1.0.841 24 / 4
1.0.840 24 / 4
1.0.839 24 / 4
1.0.838 24 / 4
1.0.837 24 / 4
1.0.836 24 / 4
1.0.835 24 / 4
1.0.834 24 / 4
1.0.833 24 / 4
1.0.832 24 / 4
1.0.831 24 / 4
1.0.830 24 / 4
1.0.829 24 / 4
1.0.828 24 / 4
1.0.827 24 / 4
1.0.826 24 / 4
1.0.825 24 / 4
1.0.824 24 / 4
1.0.823 24 / 4
1.0.822 24 / 4
1.0.821 24 / 4
1.0.820 24 / 4
1.0.819 24 / 4
1.0.818 24 / 4
1.0.817 24 / 4
1.0.816 24 / 4
1.0.815 24 / 4
1.0.814 24 / 4
1.0.813 24 / 4
1.0.812 24 / 4
1.0.811 24 / 4
1.0.810 24 / 4
1.0.809 24 / 4
1.0.808 24 / 4
1.0.807 24 / 4
1.0.806 24 / 4
1.0.805 24 / 4
1.0.804 24 / 4
1.0.803 24 / 4
1.0.802 24 / 4
1.0.801 24 / 4
1.0.800 24 / 4
1.0.799 24 / 4
1.0.798 24 / 4
1.0.797 24 / 4
1.0.742 24 / 4
1.0.622 25 / 4
1.0.618 25 / 4
1.0.617 25 / 4
1.0.616 25 / 4
1.0.615 25 / 4
1.0.613 25 / 4
1.0.612 25 / 4
1.0.611 25 / 4
1.0.610 25 / 4
1.0.330 17 / 5
1.0.329 17 / 5
Showing 100 of 272 Next page →

v1.0.330

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.329

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.