← Home

remeda

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

eranhirschtkdodolsentkiewicz

Keywords

algoalgorithmcurriedfpfunctionalgenericslodashramdastdlibtoolkittstypestypescriptunderscoreutilutilitiesutilityutils

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/hasSubObject.test-d.cjs AI (source-diff): tsup-bundled type-test fixture, minified not obfuscated ai
source-diff obfuscated-file:dist/evolve.test-d.cjs AI (source-diff): tsup-bundled type-test fixture, minified not obfuscated ai
source-diff obfuscated-file:dist/flat.test-d.cjs AI (source-diff): tsup-bundled type-test fixture, minified not obfuscated ai
source-diff obfuscated-file:dist/fromKeys.test-d.cjs AI (source-diff): tsup-bundled type-test fixture, minified not obfuscated ai
source-diff obfuscated-file:dist/conditional.test-d.cjs AI (source-diff): tsup-bundled type-test fixture, minified not obfuscated ai
source-diff large-new-source-files AI (source-diff): tsup dist bundle emits many per-function .cjs files; expected build output. ai
provenance slsa-provenance AI (provenance): Remeda publishes via CI/CD with Sigstore attestation; stable supply chain signal for this package. ai
typosquat typosquat.levenshtein:ramda AI (typosquat): Remeda is a legitimate, well-established utility library intentionally inspired by ramda; the name similarity is by design, not impersonation. Stable false positive for this package. ai

Versions (showing 51 of 103)

View all versions
Version Deps Published
2.39.0 0 / 25
2.38.0 0 / 25
2.37.0 0 / 25
2.36.0 0 / 25
2.35.0 0 / 25
2.34.1 0 / 25
2.34.0 0 / 25
2.33.7 0 / 25
2.33.6 0 / 25
2.33.5 0 / 25
2.33.4 0 / 24
2.33.3 0 / 24
2.33.2 0 / 24
2.33.1 0 / 24
2.33.0 0 / 24
2.32.2 1 / 23
2.32.1 1 / 23
2.32.0 1 / 23
2.31.1 1 / 23
2.31.0 1 / 23
2.30.0 1 / 23
2.29.0 1 / 23
2.28.0 1 / 23
2.27.2 1 / 23
2.27.1 1 / 23
2.27.0 1 / 23
2.26.1 1 / 23
2.26.0 1 / 23
2.25.0 1 / 23
2.24.1 1 / 23
2.24.0 1 / 23
2.23.3 1 / 23
2.23.2 1 / 23
2.23.1 1 / 23
2.23.0 1 / 23
2.22.6 1 / 23
2.22.5 1 / 23
2.22.4 1 / 23
2.22.3 1 / 22
2.22.2 1 / 22
2.22.1 1 / 21
2.22.0 1 / 21
2.21.9 1 / 21
2.21.8 1 / 21
2.21.7 1 / 21
2.21.6 1 / 21
2.21.5 1 / 21
2.21.4 1 / 21
2.21.3 1 / 19
2.21.2 1 / 19
2.21.1 1 / 19

v2.21.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.21.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.21.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.