← Home

@boost/translate

Package and application level translations made easy.

45
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

milesj

Keywords

boosttranslatetranslatori18nmessageresources

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): Trusted publisher milesj with 265 approved packages; missing gitHead reflects a publish environment change, not a supply chain risk. Stable accept for this package. ai
dependencies unvetted-dep:@boost/internal AI (dependencies): @boost/internal is a first-party dependency from the same milesj/boost monorepo; it is a trusted internal utility from the same publisher and stable for this package. ai
publish-pattern new-deps-added AI (publish-pattern): The new dep @boost/internal is a first-party sibling package from the same author/monorepo, not a suspicious third-party addition. ai
dependencies unvetted-dep:debug AI (dependencies): debug is a ubiquitous, well-vetted npm package used across the ecosystem; its presence in @boost/translate is expected and poses no risk. ai
provenance no-provenance AI (provenance): Package was first published ~2495 days ago, well before Sigstore provenance was available on npm. Absence of provenance is expected for this package's age. ai

Versions (showing 45 of 45)

Version Deps Published
5.0.0 4 / 0
4.0.1 4 / 0
4.0.0 4 / 0
3.0.3 4 / 0
3.0.2 4 / 0
3.0.1 4 / 0
3.0.0 4 / 0
2.2.8 4 / 0
2.2.7 4 / 0
2.2.6 4 / 0
2.2.5 4 / 0
2.2.4 4 / 0
2.2.3 4 / 0
2.2.2 4 / 0
2.2.1 4 / 0
2.2.0 4 / 0
2.1.6 4 / 0
2.1.5 4 / 0
2.1.4 4 / 0
2.1.3 4 / 0
2.1.2 4 / 0
2.1.1 4 / 0
2.1.0 4 / 0
2.0.1 4 / 0
2.0.0 4 / 0
1.3.10 4 / 0
1.3.9 4 / 0
1.3.8 4 / 0
1.3.7 4 / 0
1.3.6 4 / 0
1.3.5 4 / 0
1.3.4 4 / 0
1.3.3 4 / 0
1.3.2 4 / 0
1.3.1 4 / 0
1.3.0 4 / 0
1.2.0 4 / 0
1.1.3 4 / 0
1.1.2 4 / 0
1.1.1 4 / 0
1.1.0 4 / 0
1.0.3 4 / 0
1.0.2 4 / 0
1.0.1 4 / 0
1.0.0 4 / 0