ast-types
Esprima-compatible implementation of the Mozilla JS Parser API
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
benjamn
Keywords
astabstract syntax treehierarchymozillaspidermonkeyparser apiesprimatypestype systemtype checkingdynamic typesparsingtransformationsyntax
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:lib/gen/kinds.d.ts | AI (source-diff): lib/gen/kinds.d.ts is a generated TypeScript declaration file with long union types listing AST node names — not obfuscated code. This pattern is stable for ast-types' generated type output. | ai | |
| source-diff | obfuscated-file:gen/kinds.d.ts | AI (source-diff): Generated TypeScript declaration file with long union type lines listing AST node kinds — not obfuscated code. This pattern is expected for auto-generated .d.ts files in AST libraries. | ai | |
| source-diff | obfuscated-file:gen/nodes.d.ts | AI (source-diff): Generated TypeScript declaration file with AST node interface definitions — not obfuscated code. Long lines are a natural artifact of generated TypeScript type unions. | ai | |
| npm-metadata | url-dep:esprima | AI (npm-metadata): esprima is an optional/dev dependency used for testing only; package has no runtime deps. The git URL points to the author's own fork, consistent with this package's long history. | ai | |
| provenance | no-provenance | AI (provenance): Package predates Sigstore provenance by many years; absence is expected for this vintage. | ai | |
| phantom-deps | phantom-dep:esprima | AI (phantom-deps): esprima is an optional test dependency, not a runtime import. Phantom detection is expected here. | ai | |
| phantom-deps | phantom-dep:whiskey | AI (phantom-deps): whiskey is a test runner referenced only in the test script, not a runtime import. Phantom detection is expected. | ai |
Versions (showing 51 of 172)
| Version | Deps | Published |
|---|---|---|
| 0.16.1 | 1 / 16 | |
| 0.16.0 | 1 / 16 | |
| 0.15.2 | 1 / 18 | |
| 0.15.1 | 1 / 18 | |
| 0.15.0 | 1 / 18 | |
| 0.14.2 | 1 / 18 | |
| 0.14.1 | 1 / 18 | |
| 0.14.0 | 1 / 18 | |
| 0.13.4 | 1 / 18 | |
| 0.13.3 | 0 / 18 | |
| 0.13.2 | 0 / 18 | |
| 0.13.1 | 0 / 18 | |
| 0.13.0 | 0 / 18 | |
| 0.12.4 | 0 / 18 | |
| 0.12.3 | 0 / 18 | |
| 0.12.2 | 0 / 18 | |
| 0.12.1 | 0 / 18 | |
| 0.12.0 | 0 / 18 | |
| 0.11.7 | 0 / 9 | |
| 0.11.6 | 0 / 9 | |
| 0.11.5 | 0 / 9 | |
| 0.11.4 | 0 / 9 | |
| 0.11.3 | 0 / 9 | |
| 0.11.2 | 0 / 9 | |
| 0.11.1 | 0 / 9 | |
| 0.11.0 | 0 / 9 | |
| 0.10.2 | 0 / 7 | |
| 0.10.1 | 0 / 7 | |
| 0.10.0 | 0 / 7 | |
| 0.9.14 | 0 / 7 | |
| 0.9.13 | 0 / 7 | |
| 0.9.12 | 0 / 7 | |
| 0.9.11 | 0 / 7 | |
| 0.9.10 | 0 / 7 | |
| 0.9.9 | 0 / 7 | |
| 0.9.8 | 0 / 7 | |
| 0.9.7 | 0 / 7 | |
| 0.9.6 | 0 / 5 | |
| 0.9.5 | 0 / 5 | |
| 0.9.4 | 0 / 5 | |
| 0.9.3 | 0 / 5 | |
| 0.9.2 | 0 / 5 | |
| 0.9.1 | 0 / 5 | |
| 0.9.0 | 0 / 4 | |
| 0.8.18 | 0 / 4 | |
| 0.8.17 | 0 / 4 | |
| 0.8.16 | 0 / 4 | |
| 0.8.15 | 0 / 4 | |
| 0.8.14 | 0 / 4 | |
| 0.8.13 | 0 / 4 | |
| 0.8.12 | 0 / 4 |