← Home

intl-tel-input

51
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

jackocnr

Keywords

internationalcountrycountry-pickerdial-codetelephonephonephone-numbertelmobileinputflagdropdownjavascriptvanilla-jsvanillacssvalidationlibphonenumberformattingtypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:vue/build/intl-tel-input/data.d.ts AI (source-diff): This is a TypeScript declaration file containing inline country dial code data as a large tuple. Long lines are expected for this dataset and are not obfuscation. ai
source-diff large-new-source-files AI (source-diff): New source files are Vue framework build outputs, consistent with the new ./vue and ./vueWithUtils exports added in this version. ai
provenance publisher-changed AI (provenance): Publisher changed to GitHub Actions as part of a legitimate CI/CD migration; confirmed by SLSA Sigstore attestation. This is the expected pattern for automated publishing from the official jackocnr/intl-tel-input repo. ai

Versions (showing 51 of 88)

View all versions
Version Deps Published
29.1.2 0 / 0
29.1.1 0 / 0
29.1.0 0 / 0
29.0.5 0 / 0
29.0.4 0 / 0
29.0.3 0 / 0
29.0.2 0 / 0
29.0.1 0 / 0
29.0.0 0 / 0
28.1.0 0 / 0
28.0.9 0 / 0
28.0.8 0 / 0
28.0.7 0 / 0
28.0.6 0 / 0
28.0.5 0 / 0
28.0.4 0 / 0
28.0.3 0 / 0
28.0.2 0 / 0
28.0.1 0 / 0
28.0.0 0 / 0
27.3.1 0 / 54
27.3.0 0 / 54
27.2.1 0 / 56
27.2.0 0 / 54
27.1.3 0 / 54
27.1.2 0 / 54
27.1.1 0 / 54
27.1.0 0 / 54
27.0.17 0 / 54
27.0.16 0 / 54
27.0.15 0 / 54
27.0.11 0 / 54
27.0.10 0 / 54
27.0.9 0 / 49
27.0.8 0 / 47
27.0.7 0 / 47
27.0.6 0 / 47
27.0.5 0 / 47
27.0.4 0 / 47
27.0.3 0 / 47
27.0.2 0 / 47
27.0.1 0 / 47
27.0.0 0 / 47
26.9.2 0 / 62
26.9.1 0 / 62
26.9.0 0 / 62
26.8.1 0 / 62
26.8.0 0 / 62
26.7.6 0 / 62
26.7.5 0 / 62
26.7.4 0 / 62

v29.1.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.