@terrazzo/token-tools
Various utilities for token types
9
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
drewpowers
Keywords
design tokensdtcgcliw3cdesign systemtypescriptsasscssstyle tokensstyle systemlintinglint
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@humanwhocodes/momoa | AI (phantom-deps): @humanwhocodes/momoa is declared in dependencies and used transitively; stable false positive for this package. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from drewpowers to GitHub Actions CI/CD is a documented, legitimate migration backed by SLSA provenance attestation. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy explained by CI/CD migration; SLSA attestation and unchanged content confirm no takeover. | ai |