angular-eslint
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@angular-devkit/core | AI (phantom-deps): Meta-package; deps are re-exported/config-referenced, not directly imported. Stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@angular-eslint/builder | AI (phantom-deps): First-party sibling package referenced in config/schematics, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@typescript-eslint/types | AI (phantom-deps): Type-only dependency referenced in config; phantom-dep false positive for this meta-package. | ai | |
| phantom-deps | phantom-dep:@angular-devkit/schematics | AI (phantom-deps): Schematics dependency referenced in config files; stable false positive for this meta-package. | ai | |
| phantom-deps | phantom-dep:@angular-eslint/schematics | AI (phantom-deps): First-party sibling referenced in schematics config, not directly imported. | ai |
Versions (showing 12 of 12)
| Version | Deps | Published |
|---|---|---|
| 22.0.0 | 9 / 0 | |
| 21.4.0 | 9 / 0 | |
| 21.3.1 | 9 / 0 | |
| 21.3.0 | 9 / 0 | |
| 21.2.0 | 9 / 0 | |
| 21.1.0 | 9 / 0 | |
| 21.0.1 | 9 / 0 | |
| 21.0.0 | 9 / 0 | |
| 20.7.0 | 9 / 0 | |
| 20.6.0 | 9 / 0 | |
| 20.5.2 | 9 / 0 | |
| 20.5.1 | 9 / 0 |
v22.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.4.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.3.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.2.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.1.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.0.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v20.7.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v20.6.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v20.5.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v20.5.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.