← Home

@wisemen/eslint-config-vue

npm Repository Homepage

Eslint config for Vue.js projects

3
Versions
SEE LICENSE IN LICENSE.md
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

wouter.appwisekobe-kwanten-wisemenjorenvandeweyerrobbe95fullmetaljsmaartensijmkenswisemen-sysopspeethadaanpersoonsjonasvannieuwenhuijsenyuhanghujonasbeckerssebastiaanvanspauwenjeroen-vc

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:eslint-plugin-path AI (dependencies): Standard ESLint plugin; no malware indicators; stable for this config package. ai
dependencies unvetted-dep:@antfu/eslint-config AI (dependencies): Well-known ESLint config by Anthony Fu; stable ecosystem package. ai
dependencies unvetted-dep:@vitest/eslint-plugin AI (dependencies): Official Vitest ESLint plugin; stable ecosystem package. ai
dependencies unvetted-dep:@wisemen/eslint-plugin-vue AI (dependencies): Same Wisemen org; consistent with this package's provenance. ai
dependencies unvetted-dep:eslint-plugin-import-newlines AI (dependencies): Standard ESLint formatting plugin; no malware indicators. ai
dependencies unvetted-dep:@intlify/eslint-plugin-vue-i18n AI (dependencies): Official intlify/vue-i18n ESLint plugin; stable ecosystem package. ai
dependencies unvetted-dep:eslint-plugin-newline-destructuring AI (dependencies): Standard ESLint formatting plugin; no malware indicators. ai
dependencies unvetted-dep:eslint-plugin-require-explicit-generics AI (dependencies): Standard ESLint TypeScript plugin; no malware indicators. ai
phantom-deps phantom-dep:eslint-plugin-import-newlines AI (phantom-deps): ESLint plugin referenced in config files by convention. ai
phantom-deps phantom-dep:eslint AI (phantom-deps): ESLint config package; eslint is a peer dep loaded by consumers, not directly imported in source. ai
phantom-deps phantom-dep:eslint-plugin-require-explicit-generics AI (phantom-deps): ESLint plugin referenced in config files by convention. ai
phantom-deps phantom-dep:eslint-plugin-newline-destructuring AI (phantom-deps): ESLint plugin referenced in config files by convention. ai
phantom-deps phantom-dep:eslint-typegen AI (phantom-deps): Used in config/build context, not directly imported in runtime source; stable false positive for this package. ai
phantom-deps phantom-dep:eslint-plugin-format AI (phantom-deps): ESLint plugin referenced in config files by convention, not direct import. ai
phantom-deps phantom-dep:@vitest/eslint-plugin AI (phantom-deps): Framework-scoped plugin loaded by convention in ESLint config, not direct import. ai
phantom-deps phantom-dep:eslint-plugin-check-file AI (phantom-deps): ESLint plugin referenced in config files by convention. ai
phantom-deps phantom-dep:@typescript-eslint/parser AI (phantom-deps): Parser referenced in config, not directly imported in source. ai
phantom-deps phantom-dep:eslint-plugin-perfectionist AI (phantom-deps): ESLint plugin referenced in config files by convention. ai
phantom-deps phantom-dep:eslint-plugin-unused-imports AI (phantom-deps): ESLint plugin referenced in config files by convention. ai

Versions (showing 3 of 3)

Version Deps Published
2.1.3 22 / 3
2.1.2 22 / 3
2.0.0 22 / 3

v2.1.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.