← Home

@hot-updater/js

npm Repository Homepage

React Native OTA solution for self-hosted

7
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

gronxb

Keywords

react-nativereact-native-code-pushcode-pusheaseas-updateexpoexpo-updateself-hosted

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:qs AI (typosquat): Scoped @hot-updater monorepo package; no impersonation of 'qs'. Levenshtein match is coincidental. ai
typosquat typosquat.levenshtein:jest AI (typosquat): Scoped @hot-updater monorepo package; no impersonation of 'jest'. ai
typosquat typosquat.levenshtein:pg AI (typosquat): Scoped @hot-updater monorepo package; no impersonation of 'pg'. ai
typosquat typosquat.levenshtein:rxjs AI (typosquat): Scoped @hot-updater monorepo package; no impersonation of 'rxjs'. ai
typosquat typosquat.levenshtein:joi AI (typosquat): Scoped @hot-updater monorepo package; no impersonation of 'joi'. ai
typosquat typosquat.levenshtein:ajv AI (typosquat): Scoped @hot-updater monorepo package; no impersonation of 'ajv'. ai

Versions (showing 7 of 108)

Version Deps Published
0.18.5 1 / 4
0.18.4 1 / 4
0.18.3 1 / 4
0.18.2 1 / 4
0.18.1 1 / 4
0.18.0 1 / 4
0.17.0 1 / 4

v0.18.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.18.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.18.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.18.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.18.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.18.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.17.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.