@babel/preset-typescript
Babel preset for TypeScript.
46
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
hzooexistentialismnicolo-ribaudojlhwung
Keywords
babel-presettypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Published in 2020 before gitHead/provenance was standard; nicolo-ribaudo is a trusted Babel core maintainer. No malicious signal. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @babel/helper-validator-option is a first-party Babel monorepo package; adding it is consistent with normal Babel ecosystem evolution and poses no supply chain risk. | ai | |
| provenance | publisher-changed | AI (provenance): jlhwung is a long-standing Babel core team member (2132 days, 151 packages, 1754 approved). Publisher rotation within the Babel org is expected and not a compromise signal. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): jlhwung is an established Babel maintainer; addition reflects normal team management within the official Babel org. | ai | |
| bogus-package | bogus-package | AI (bogus-package): loganfsmyth and hzoo are well-known Babel core contributors (Logan Smyth, Henry Zhu), not spammers. Tiny payload is expected for a Babel preset that delegates to plugin packages. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Removal of loganfsmyth and danez reflects normal Babel team evolution; no unknown new maintainers added. Stable pattern for this package. | ai | |
| dependencies | unvetted-dep:@babel/plugin-syntax-jsx | AI (dependencies): First-party @babel/* dependency from the same official Babel monorepo; expected and stable for this package. | ai | |
| dependencies | unvetted-dep:@babel/plugin-transform-modules-commonjs | AI (dependencies): First-party @babel/* dependency from the same official Babel monorepo; expected and stable for this package. | ai | |
| dependencies | unvetted-dep:@babel/plugin-transform-typescript | AI (dependencies): First-party @babel/* dependency from the same official Babel monorepo; expected and stable for this package. | ai | |
| provenance | no-provenance | AI (provenance): Babel publishes via GitHub Actions CI but does not attach Sigstore provenance; this is consistent across all Babel releases and not a risk indicator. | ai |
Versions (showing 46 of 46)
| Version | Deps | Published |
|---|---|---|
| 7.29.7 | 5 / 2 | |
| 7.28.5 | 5 / 2 | |
| 7.27.1 | 5 / 2 | |
| 7.27.0 | 5 / 2 | |
| 7.26.0 | 5 / 2 | |
| 7.25.9 | 5 / 2 | |
| 7.25.7 | 5 / 2 | |
| 7.24.7 | 5 / 2 | |
| 7.24.6 | 5 / 2 | |
| 7.24.1 | 5 / 2 | |
| 7.23.3 | 5 / 2 | |
| 7.23.2 | 5 / 2 | |
| 7.23.0 | 5 / 2 | |
| 7.22.15 | 5 / 2 | |
| 7.22.11 | 5 / 2 | |
| 7.22.5 | 5 / 2 | |
| 7.21.5 | 5 / 2 | |
| 7.21.4 | 5 / 2 | |
| 7.21.0 | 3 / 2 | |
| 7.18.6 | 3 / 2 | |
| 7.17.12 | 3 / 2 | |
| 7.16.7 | 3 / 2 | |
| 7.16.5 | 3 / 2 | |
| 7.16.0 | 3 / 2 | |
| 7.15.0 | 3 / 2 | |
| 7.14.5 | 3 / 2 | |
| 7.13.0 | 3 / 2 | |
| 7.12.17 | 3 / 2 | |
| 7.12.16 | 3 / 2 | |
| 7.12.13 | 3 / 2 | |
| 7.12.7 | 3 / 2 | |
| 7.12.1 | 2 / 2 | |
| 7.12.0 | 2 / 2 | |
| 7.10.4 | 2 / 2 | |
| 7.10.1 | 2 / 2 | |
| 7.9.0 | 2 / 2 | |
| 7.8.3 | 2 / 2 | |
| 7.8.0 | 2 / 2 | |
| 7.7.7 | 2 / 2 | |
| 7.7.4 | 2 / 2 | |
| 7.7.2 | 2 / 2 | |
| 7.7.0 | 2 / 2 | |
| 7.6.0 | 2 / 2 | |
| 7.3.3 | 2 / 2 | |
| 7.1.0 | 2 / 2 | |
| 7.0.0 | 2 / 2 |
v7.29.7
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.