@theia/dev-container EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0 2 versions

@theia/dev-container

npm Repository Homepage

Theia - Editor Preview Extension

Versions

EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

eclipsetheiavince-fugnittobhufmannmarc.dumaispaul-marechalmsujewtsmaederjfaltermeierjhelmingeclipse-theia-botsgrabandndoschek

theia-extension

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
semgrep	semgrep:child-process-import	AI (semgrep): Dev-container extension legitimately spawns Docker/Compose processes; child_process use is expected and documented.	ai	2026/05/23
phantom-deps	phantom-dep:uuid	AI (phantom-deps): uuid is declared in package.json dependencies; phantom-dep heuristic false positive for this package.	ai	2026/05/23

Version	Deps	Published
1.70.2	7 / 2	2026-04-10
1.62.0	7 / 2	2025-05-28

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.