time-fix-plugin
Fix startTime for webpack watcher
9
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
egoistrem
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Missing gitHead is consistent with a publish environment change during the 2018 maintainer transition; no other risk signals present. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher change from rem→egoist occurred in 2018; egoist is a highly trusted publisher (457 approved packages). This is a stable historical transition, not a compromise signal. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): egoist was added as maintainer in 2018 and is a well-established npm publisher with a strong track record. Legitimate historical transfer. | ai |