← Home

@xylabs/vitest-extended

32
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

joelbcarterjordantrouwrphansen91jonesmacatrouw

Keywords

xylabsdeprecatedshim

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@ariestools/vitest-extended AI (dependencies): Rename target of this deprecated shim package, not a novel unvetted dep. ai
provenance missing-githead AI (provenance): Trusted publisher (xyo) with 304 approved packages; isolated publish environment change, no other risk signals. ai
publish-pattern new-deps-added AI (publish-pattern): New dep is same-org xylabs package pinned to matching version; consistent with internal monorepo refactor. ai
provenance no-provenance AI (provenance): XY Labs packages consistently publish without Sigstore provenance; stable false positive for this org. ai

Versions (showing 32 of 132)

Version Deps Published
5.0.31 1 / 4
5.0.30 1 / 4
5.0.29 1 / 4
5.0.28 1 / 4
5.0.27 1 / 4
5.0.26 1 / 4
5.0.25 1 / 4
5.0.24 1 / 4
5.0.23 1 / 4
5.0.22 1 / 4
5.0.21 1 / 4
5.0.20 1 / 4
5.0.19 1 / 4
5.0.18 1 / 4
5.0.17 1 / 4
5.0.16 1 / 4
5.0.15 1 / 4
5.0.14 1 / 4
5.0.13 1 / 4
5.0.12 1 / 4
5.0.11 1 / 4
5.0.10 1 / 4
5.0.9 1 / 4
5.0.8 1 / 4
5.0.7 1 / 4
5.0.6 1 / 4
5.0.5 1 / 4
5.0.4 1 / 4
5.0.3 2 / 3
5.0.2 2 / 3
5.0.1 2 / 3
5.0.0 2 / 3