react-addons-create-fragment
28
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
sophiebitstrueadmgaearonbrianvaughnfb
Keywords
reactreact-addon
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): sophiebits (Sophie Alpert) is a well-known React core team member; the gaearon→sophiebits transition in 2017 was a legitimate Facebook/React team publishing consolidation. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): sophiebits is a long-standing React core team member with a strong track record; addition is part of legitimate React team publishing consolidation. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Removal of previous React team maintainers is part of the documented 2017 React npm publishing consolidation, not a hostile takeover. | ai | |
| bogus-package | bogus-package | AI (bogus-package): fb and gaearon are official Facebook/React maintainers, not spam publishers. No-description is typical for React addon shim packages. | ai | |
| phantom-deps | phantom-dep:loose-envify | AI (phantom-deps): loose-envify is used as a browserify transform (declared in browserify config), not a direct import — standard pattern for React addon packages. | ai | |
| phantom-deps | phantom-dep:object-assign | AI (phantom-deps): object-assign is used in the build/bundle process for this React addon; phantom-dep flag is a false positive for this package's build pattern. | ai |
Versions (showing 28 of 28)
| Version | Deps | Published |
|---|---|---|
| 15.6.2 | 3 / 4 | |
| 15.6.0 | 3 / 4 | |
| 15.5.4 | 3 / 3 | |
| 15.5.3 | 2 / 3 | |
| 15.5.2 | 2 / 3 | |
| 15.5.1 | 2 / 3 | |
| 15.5.0 | 2 / 3 | |
| 15.4.2 | 2 / 0 | |
| 15.4.1 | 0 / 0 | |
| 15.4.0 | 0 / 0 | |
| 15.3.2 | 0 / 0 | |
| 15.3.1 | 0 / 0 | |
| 15.3.0 | 0 / 0 | |
| 15.2.1 | 0 / 0 | |
| 15.2.0 | 0 / 0 | |
| 15.1.0 | 0 / 0 | |
| 15.0.2 | 0 / 0 | |
| 15.0.1 | 0 / 0 | |
| 15.0.0 | 0 / 0 | |
| 0.14.8 | 0 / 0 | |
| 0.14.7 | 0 / 0 | |
| 0.14.6 | 0 / 0 | |
| 0.14.5 | 0 / 0 | |
| 0.14.4 | 0 / 0 | |
| 0.14.3 | 0 / 0 | |
| 0.14.2 | 0 / 0 | |
| 0.14.1 | 0 / 0 | |
| 0.14.0 | 0 / 0 |