@types/rimraf
TypeScript definitions for rimraf
12
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
types
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| email-domain | unclaimed-email:https://github.com/soywiz | AI (email-domain): The 'email' field contains a GitHub profile URL, not an actual email address or registerable domain. This is a data-entry quirk in an old DefinitelyTyped package, not a real domain hijack risk. | ai | |
| dependencies | unvetted-dep:@types/glob | AI (dependencies): @types/glob is a standard DefinitelyTyped package; its use as a dependency in @types/rimraf is expected and benign across all versions. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy is explained by upstream rimraf shipping its own types; this publish is a legitimate deprecation stub update, not an account takeover signal. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): Adding rimraf as a dependency is the canonical pattern for a stub @types package that redirects to the upstream package's bundled types. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Stub/deprecation shims in the @types namespace are intentionally minimal with no code, no README instructions, and no keywords. This is expected for this package type. | ai | |
| phantom-deps | phantom-dep:rimraf | AI (phantom-deps): Zero-code stub package; rimraf dependency is declared to pull in the upstream package with bundled types, not to import it directly. | ai | |
| provenance | no-provenance | AI (provenance): DefinitelyTyped packages published via the types npm user do not currently include Sigstore provenance; this is expected and stable for this publisher. | ai | |
| phantom-deps | phantom-dep:@types/glob | AI (phantom-deps): DefinitelyTyped packages declare @types/* as dependencies by convention; they are not directly imported but are required for type resolution. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): DefinitelyTyped packages declare @types/node by convention for type resolution; not a phantom dependency in the traditional sense. | ai |