@babel/runtime-corejs3
babel's modular runtime helpers with core-js@3 polyfilling
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| bogus-package | bogus-package | AI (bogus-package): Babel ecosystem package; spam-flagged co-maintainers (hzoo, loganfsmyth, danez) are well-known Babel contributors, not actual spammers. Empty main and no keywords are normal for this runtime helper package. | ai | |
| provenance | no-provenance | AI (provenance): Package is 2591 days old; provenance attestation was not available at publish time. Expected for legacy Babel releases. | ai |
Versions (showing 19 of 19)
| Version | Deps | Published |
|---|---|---|
| 7.29.7 | 1 / 0 | |
| 7.29.2 | 1 / 0 | |
| 7.29.0 | 1 / 0 | |
| 7.28.6 | 1 / 0 | |
| 7.28.4 | 1 / 0 | |
| 7.28.3 | 1 / 0 | |
| 7.28.2 | 1 / 0 | |
| 7.28.0 | 1 / 0 | |
| 7.27.6 | 1 / 0 | |
| 7.27.4 | 1 / 0 | |
| 7.27.3 | 1 / 0 | |
| 7.27.1 | 1 / 0 | |
| 7.27.0 | 2 / 0 | |
| 7.26.10 | 2 / 0 | |
| 8.0.0-rc.3 | 1 / 0 | |
| 8.0.0-rc.2 | 1 / 0 | |
| 8.0.0-rc.1 | 1 / 0 | |
| 8.0.0-beta.4 | 1 / 0 | |
| 8.0.0-beta.3 | 1 / 0 |
v7.29.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v7.29.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.28.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.28.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.28.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.28.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.28.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.27.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.27.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.27.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.27.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.27.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.26.10
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.