@vitus-labs/tools-rollup
[Rollup](https://rollupjs.org)-powered build tool for TypeScript libraries.
25
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
vitbokisch
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Package has SLSA provenance attestation which supersedes gitHead as a supply-chain integrity signal. | ai | |
| dependencies | unvetted-dep:rollup-plugin-api-extractor | AI (dependencies): Rollup build tooling package; this plugin is a legitimate peer for its documented use case. | ai | |
| dependencies | unvetted-dep:rollup-plugin-tsconfig-paths | AI (dependencies): Rollup build tooling package; tsconfig-paths plugin is a legitimate dependency for its documented use case. | ai | |
| dependencies | unvetted-dep:rollup-plugin-typescript-paths | AI (dependencies): Rollup build tooling package; typescript-paths plugin is a legitimate dependency for its documented use case. | ai | |
| phantom-deps | phantom-dep:@microsoft/api-extractor | AI (phantom-deps): Referenced in config files for API extraction; stable false positive for this rollup tooling package. | ai | |
| phantom-deps | phantom-dep:@rollup/plugin-typescript | AI (phantom-deps): Rollup plugin loaded by convention in build config; stable false positive. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit runtime dependency for TypeScript output; stable false positive for this build tooling package. | ai | |
| phantom-deps | phantom-dep:rollup-plugin-tsconfig-paths | AI (phantom-deps): Rollup plugin referenced in config files; stable false positive. | ai | |
| phantom-deps | phantom-dep:rollup-plugin-typescript-paths | AI (phantom-deps): Rollup plugin referenced in config files; stable false positive. | ai | |
| phantom-deps | phantom-dep:typescript-transform-paths | AI (phantom-deps): TypeScript transform plugin referenced in config; stable false positive. | ai | |
| phantom-deps | phantom-dep:find-up | AI (phantom-deps): Referenced in config files as expected for a build tool; stable false positive. | ai | |
| phantom-deps | phantom-dep:lodash-es | AI (phantom-deps): Referenced in config files; stable false positive for this build tooling package. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): Framework-scoped type package loaded by convention; stable false positive. | ai |
Versions (showing 25 of 25)
| Version | Deps | Published |
|---|---|---|
| 2.6.2 | 20 / 3 | |
| 2.6.1 | 20 / 3 | |
| 2.6.0 | 20 / 3 | |
| 2.5.0 | 20 / 3 | |
| 2.4.0 | 20 / 3 | |
| 2.3.1 | 20 / 3 | |
| 2.3.0 | 21 / 3 | |
| 2.2.0 | 21 / 3 | |
| 2.1.0 | 21 / 3 | |
| 2.0.0 | 21 / 3 | |
| 1.15.5 | 21 / 3 | |
| 1.15.4 | 21 / 3 | |
| 1.15.3 | 21 / 3 | |
| 1.15.2 | 21 / 3 | |
| 1.15.1 | 21 / 3 | |
| 1.15.0 | 21 / 3 | |
| 1.14.0 | 21 / 3 | |
| 1.13.0 | 21 / 3 | |
| 1.12.0 | 21 / 3 | |
| 1.11.0 | 21 / 3 | |
| 1.10.0 | 21 / 3 | |
| 1.9.0 | 21 / 3 | |
| 1.7.0 | 21 / 3 | |
| 1.6.0 | 21 / 3 | |
| 1.5.1 | 21 / 3 |