@umijs/lint No license 47 versions

@umijs/lint

npm Repository Homepage

47

Versions

—

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sorryccchenshuai2144kuitospeachscriptxiaohuoniyifankakaxixierenyuanxusd320zoomdong07

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
phantom-deps	phantom-dep:@typescript-eslint/eslint-plugin	AI (phantom-deps): ESLint plugin loaded by config convention, not directly imported.	ai	2026/04/30
phantom-deps	phantom-dep:postcss	AI (phantom-deps): Lint config package; postcss loaded by convention via stylelint, not directly imported.	ai	2026/04/30
phantom-deps	phantom-dep:@babel/core	AI (phantom-deps): Framework-scoped; loaded by babel-eslint-parser convention, not directly imported.	ai	2026/04/30
phantom-deps	phantom-dep:postcss-syntax	AI (phantom-deps): Referenced in config files by convention, not directly imported.	ai	2026/04/30
phantom-deps	phantom-dep:eslint-plugin-jest	AI (phantom-deps): ESLint plugin loaded by config convention, not directly imported.	ai	2026/04/30
phantom-deps	phantom-dep:eslint-plugin-react	AI (phantom-deps): ESLint plugin loaded by config convention, not directly imported.	ai	2026/04/30
phantom-deps	phantom-dep:eslint-plugin-react-hooks	AI (phantom-deps): ESLint plugin loaded by config convention, not directly imported.	ai	2026/04/30
typosquat	typosquat.levenshtein:eslint	AI (typosquat): Scoped @umijs/ package; not a typosquat of eslint.	ai	2026/04/29
typosquat	typosquat.levenshtein:pino	AI (typosquat): Scoped @umijs/ package; not a typosquat of pino.	ai	2026/04/29
semgrep	semgrep:dynamic-require	AI (semgrep): Fires in compiled/@rushstack/eslint-patch bundle; legitimate eslint config resolution pattern.	ai	2026/04/29
semgrep	semgrep:base64-decode	AI (semgrep): Fires in compiled/postcss-less minified bundle; no malicious payload.	ai	2026/04/29
semgrep	semgrep:new-function-constructor	AI (semgrep): Fires in compiled/postcss-less minified bundle; standard parser pattern.	ai	2026/04/29
semgrep	semgrep:env-bulk-read	AI (semgrep): Fires in compiled stylelint plugin bundle; config library pattern.	ai	2026/04/29
semgrep	semgrep:api-obfuscation-reflect	AI (semgrep): Fires in compiled stylelint plugin bundle; not obfuscation.	ai	2026/04/29

Versions (showing 47 of 247)

Version	Deps	Published
4.0.46	12 / 5	2023-01-16
4.0.45	12 / 5	2023-01-16
4.0.44	12 / 5	2023-01-12
4.0.43	12 / 5	2023-01-12
4.0.42	12 / 5	2023-01-05
4.0.41	12 / 5	2022-12-29
4.0.40	12 / 5	2022-12-23
4.0.39	12 / 5	2022-12-22
4.0.38	12 / 5	2022-12-16
4.0.37	12 / 5	2022-12-16
4.0.36	12 / 5	2022-12-08
4.0.35	12 / 5	2022-12-08
4.0.34	12 / 5	2022-12-01
4.0.33	12 / 5	2022-11-24
4.0.32	12 / 5	2022-11-17
4.0.31	12 / 5	2022-11-17
4.0.30	12 / 5	2022-11-10
4.0.29	12 / 5	2022-11-04
4.0.28	12 / 5	2022-10-28
4.0.27	12 / 5	2022-10-27
4.0.26	12 / 5	2022-10-20
4.0.25	12 / 5	2022-10-13
4.0.24	12 / 5	2022-09-29
4.0.23	12 / 5	2022-09-29
4.0.22	12 / 5	2022-09-22
4.0.21	12 / 5	2022-09-15
4.0.20	12 / 5	2022-09-13
4.0.19	12 / 5	2022-09-08
4.0.18	12 / 5	2022-09-07
4.0.17	12 / 5	2022-09-01
4.0.16	12 / 5	2022-09-01
4.0.15	12 / 5	2022-08-26
4.0.14	12 / 5	2022-08-25
4.0.13	12 / 5	2022-08-18
4.0.12	12 / 5	2022-08-11
4.0.11	12 / 5	2022-08-04
4.0.10	12 / 5	2022-08-04
4.0.9	12 / 5	2022-07-28
4.0.8	12 / 5	2022-07-21
4.0.7	12 / 5	2022-07-14
4.0.6	12 / 5	2022-07-07
4.0.5	12 / 5	2022-07-01
4.0.4	12 / 5	2022-07-01
4.0.3	12 / 5	2022-06-30
4.0.2	12 / 5	2022-06-24
4.0.1	12 / 5	2022-06-23
4.0.0	12 / 5	2022-06-21

v4.0.46

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.45

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.44

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.43

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.42

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.41

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.40

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.39

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.38

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.37

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.36

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.35

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.34

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.33

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.32

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.31

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.30

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.29

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.28

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.27

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.26

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.25

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.24

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.23

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.22

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.21

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.19

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.18

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.17

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.16

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.15

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.14

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.13

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.12

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.10

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.