← Home

react-native-worklets

npm Repository Homepage

The React Native multithreading library

31
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tjzelswm-bot

Keywords

react-nativereactnativeworklets

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:eval-usage AI (semgrep): eval() is the core mechanism of the worklets runtime — it evaluates serialized worklet functions on background threads. This is the intentional, documented design of the library, not a supply-chain risk. ai
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require in validate-react-native-version.js loads a local package.json via __dirname-relative path for version validation. Benign build/validation script pattern. ai
phantom-deps phantom-dep:@babel/plugin-transform-classes AI (phantom-deps): Babel transform plugins are loaded by convention through the Babel plugin system, not via direct imports. Standard pattern for Babel-based tooling. ai
phantom-deps phantom-dep:@babel/plugin-transform-unicode-regex AI (phantom-deps): Babel transform plugins are loaded by convention through the Babel plugin system, not via direct imports. Standard pattern for Babel-based tooling. ai
phantom-deps phantom-dep:@babel/plugin-transform-class-properties AI (phantom-deps): Babel transform plugins are loaded by convention through the Babel plugin system, not via direct imports. Standard pattern for Babel-based tooling. ai

Versions (showing 31 of 31)

Show 162 prereleases
Version Deps Published
0.11.3 14 / 18
0.11.2 14 / 18
0.11.1 14 / 18
0.11.0 14 / 18
0.10.3 12 / 18
0.10.2 12 / 18
0.10.1 12 / 18
0.10.0 12 / 18
0.9.3 12 / 18
0.9.2 12 / 18
0.9.1 11 / 18
0.9.0 11 / 18
0.8.3 11 / 20
0.8.2 11 / 20
0.8.1 11 / 20
0.7.4 11 / 18
0.7.3 11 / 18
0.7.2 11 / 18
0.7.1 11 / 18
0.7.0 11 / 18
0.6.1 11 / 18
0.6.0 11 / 18
0.5.2 11 / 18
0.5.1 11 / 18
0.5.0 11 / 18
0.4.2 10 / 18
0.4.1 10 / 18
0.4.0 10 / 18
0.3.0 10 / 18
0.2.0 0 / 16
0.1.0 0 / 16

v0.11.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.11.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.