react-timer-mixin
TimerMixin provides timer functions for executing code in the future that are safely cleaned up when the component unmounts
5
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
awearysophiebitstadeuzagallo
Keywords
reacttimermixin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): spicyj and sophiebits are both npm accounts for Sophie Alpert (React core team); this is a documented account rename, not a hostile takeover. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): sophiebits is Sophie Alpert's renamed npm account; addition reflects a legitimate account transition, not a new unknown party. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): spicyj removal is the other side of Sophie Alpert's account rename to sophiebits; no actual change in control. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy followed by 2018 publish aligns with Sophie Alpert's npm account rename; no code changes introduced, consistent with routine maintenance. | ai |