@thi.ng/ecs Apache-2.0 48 versions

@thi.ng/ecs

npm Repository Homepage

Entity Component System based around typed arrays & sparse sets

48

Versions

Apache-2.0

License

No

Install Scripts

Missing

Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

thi.ng

Keywords

accelerationanimationaosarraycachecomponentdata-orienteddatastructureecsentitymemorymemory-mappedtypedarraytypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
typosquat	typosquat.levenshtein:qs	AI (typosquat): Scoped @thi.ng/ecs package from established monorepo; Levenshtein match to 'qs' is a false positive.	ai	2026/04/29
dependencies	unvetted-dep:@thi.ng/api	AI (dependencies): Sibling package from the same thi.ng/umbrella monorepo; not an independent supply-chain risk.	ai	2026/04/29
dependencies	unvetted-dep:@thi.ng/dcons	AI (dependencies): Sibling package from the same thi.ng/umbrella monorepo.	ai	2026/04/29
dependencies	unvetted-dep:@thi.ng/idgen	AI (dependencies): Sibling package from the same thi.ng/umbrella monorepo.	ai	2026/04/29
dependencies	unvetted-dep:@thi.ng/binary	AI (dependencies): Sibling package from the same thi.ng/umbrella monorepo.	ai	2026/04/29
dependencies	unvetted-dep:@thi.ng/malloc	AI (dependencies): Sibling package from the same thi.ng/umbrella monorepo.	ai	2026/04/29
dependencies	unvetted-dep:@thi.ng/associative	AI (dependencies): Sibling package from the same thi.ng/umbrella monorepo.	ai	2026/04/29
dependencies	unvetted-dep:@thi.ng/transducers	AI (dependencies): Sibling package from the same thi.ng/umbrella monorepo.	ai	2026/04/29

Versions (showing 48 of 48)

Version	Deps	Published
0.7.215	10 / 4	2026-06-05
0.7.214	10 / 4	2026-05-23
0.7.213	10 / 4	2026-05-20
0.7.211	10 / 4	2026-05-11
0.7.210	10 / 4	2026-05-08
0.7.208	10 / 4	2026-04-26
0.7.207	10 / 4	2026-04-18
0.7.206	10 / 4	2026-04-02
0.7.205	10 / 4	2026-03-19
0.7.204	10 / 4	2026-03-11
0.7.203	10 / 4	2026-03-11
0.7.202	10 / 4	2026-03-08
0.7.201	10 / 4	2026-03-07
0.7.200	10 / 4	2026-03-07
0.7.198	10 / 4	2026-02-07
0.7.197	10 / 4	2026-01-23
0.7.196	10 / 4	2026-01-16
0.7.195	10 / 4	2025-12-25
0.7.194	10 / 4	2025-12-11
0.7.193	10 / 4	2025-12-03
0.7.192	10 / 4	2025-11-25
0.7.191	10 / 4	2025-11-21
0.7.190	10 / 4	2025-11-13
0.7.189	10 / 4	2025-10-25
0.7.188	10 / 4	2025-10-24
0.7.184	10 / 4	2025-10-07
0.7.183	10 / 4	2025-09-25
0.7.182	10 / 4	2025-09-25
0.7.181	10 / 4	2025-09-01
0.7.180	10 / 4	2025-08-11
0.7.179	10 / 4	2025-08-07
0.7.178	10 / 4	2025-08-04
0.7.176	10 / 4	2025-07-30
0.7.175	10 / 4	2025-07-21
0.7.174	10 / 4	2025-07-20
0.7.173	10 / 4	2025-07-15
0.7.172	10 / 4	2025-07-14
0.7.171	10 / 4	2025-07-13
0.7.170	10 / 4	2025-07-10
0.7.169	11 / 4	2025-07-09
0.7.168	11 / 4	2025-07-03
0.7.167	11 / 4	2025-07-02
0.7.166	11 / 4	2025-06-24
0.7.165	11 / 4	2025-06-18
0.7.164	11 / 4	2025-06-14
0.7.163	11 / 4	2025-06-09
0.7.162	11 / 4	2025-05-28
0.7.161	11 / 4	2025-04-30

v0.7.215

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.214

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.213

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.211

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.210

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.208

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.7.205

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.204

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.203

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.202

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.201

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.200

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.198

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.197

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.196

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.195

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.194

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.193

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.192

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.191

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.190

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.7.189

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.188

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.184

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.183

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.182

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.181

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.180

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.179

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.178

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.176

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.175

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.174

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.173

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.172

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.171

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.170

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.169

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.168

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.167

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.166

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.165

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.164

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.163

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.162

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.7.161

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.