← Home

figma-transformer

```js import { processFile } from "figma-transformer";

22
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

souporseriousbraposo

Keywords

figmadesignprocesstransformerapi

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Legitimate maintainer transition to souporserious (est. account, 306 approvals). Publisher change occurred in 2021; stable for this package. ai
maintainer-change maintainer-added AI (maintainer-change): souporserious added as maintainer in 2021 transition from braposo; well-established npm account with clean record. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy consistent with maintainer transition on a mature, low-churn utility package. No suspicious code changes. ai
provenance missing-githead AI (provenance): Established package with clean history; missing gitHead likely reflects a local publish rather than malicious activity. No other risk signals present. ai
provenance no-provenance AI (provenance): Package predates Sigstore provenance adoption; absence is expected for this maintainer's workflow and not indicative of risk. ai

Versions (showing 22 of 22)

Version Deps Published
2.1.0 0 / 6
2.0.8 0 / 8
2.0.7 0 / 8
2.0.6 0 / 7
2.0.5 0 / 5
2.0.4 0 / 5
2.0.3 0 / 5
2.0.2 0 / 5
2.0.1 0 / 5
2.0.0 0 / 5
1.0.0 0 / 6
0.1.10 0 / 6
0.1.9 0 / 6
0.1.8 0 / 6
0.1.7 0 / 6
0.1.6 0 / 6
0.1.5 0 / 6
0.1.4 0 / 6
0.1.3 0 / 6
0.1.2 0 / 6
0.1.1 1 / 5
0.1.0 3 / 6