@thesvg/cli
CLI tool to add SVG icons from thesvg.org to your project
8
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
gdsks
Keywords
svgiconsbrandclithesvg
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | slsa-provenance | AI (provenance): Package explicitly configures provenance in publishConfig; SLSA attestation is expected and stable. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped SVG CLI tool; Levenshtein match to 'joi' is coincidental with no semantic or brand overlap. | ai |