@testing-library/react-native
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:coverage/lcov-report/prettify.js | AI (source-diff): prettify.js is the well-known Google Code Prettify syntax highlighter, minified by design, and is a standard artifact generated by LCOV HTML coverage reports. Not malicious. | ai |
Versions (showing 87 of 87)
| Version | Deps | Published |
|---|---|---|
| 13.3.3 | 4 / 30 | |
| 13.3.2 | 4 / 30 | |
| 13.3.1 | 4 / 30 | |
| 13.3.0 | 4 / 30 | |
| 13.2.2 | 4 / 30 | |
| 13.2.1 | 4 / 30 | |
| 13.2.0 | 4 / 30 | |
| 13.1.1 | 4 / 30 | |
| 13.1.0 | 5 / 28 | |
| 13.0.1 | 4 / 28 | |
| 13.0.0 | 3 / 28 | |
| 12.9.0 | 3 / 28 | |
| 12.8.1 | 3 / 27 | |
| 12.8.0 | 3 / 27 | |
| 12.7.2 | 3 / 27 | |
| 12.7.1 | 3 / 27 | |
| 12.7.0 | 3 / 27 | |
| 12.6.1 | 3 / 27 | |
| 12.6.0 | 3 / 27 | |
| 12.5.3 | 3 / 27 | |
| 12.5.2 | 3 / 27 | |
| 12.5.1 | 3 / 27 | |
| 12.5.0 | 3 / 27 | |
| 12.4.5 | 3 / 27 | |
| 12.4.4 | 3 / 27 | |
| 12.4.3 | 3 / 27 | |
| 12.4.2 | 3 / 27 | |
| 12.4.1 | 3 / 25 | |
| 12.4.0 | 3 / 25 | |
| 12.3.3 | 3 / 25 | |
| 12.3.2 | 3 / 25 | |
| 12.3.1 | 3 / 25 | |
| 12.3.0 | 3 / 24 | |
| 12.2.2 | 1 / 25 | |
| 12.2.1 | 1 / 25 | |
| 12.2.0 | 1 / 25 | |
| 12.1.3 | 1 / 25 | |
| 12.1.2 | 1 / 26 | |
| 12.1.1 | 1 / 26 | |
| 12.1.0 | 4 / 26 | |
| 12.0.1 | 1 / 26 | |
| 12.0.0 | 1 / 26 | |
| 11.5.4 | 1 / 26 | |
| 11.5.3 | 1 / 26 | |
| 11.5.2 | 1 / 26 | |
| 11.5.1 | 1 / 26 | |
| 11.5.0 | 1 / 27 | |
| 11.4.0 | 1 / 27 | |
| 11.3.0 | 1 / 27 | |
| 11.2.0 | 1 / 27 | |
| 11.1.0 | 1 / 27 | |
| 11.0.0 | 1 / 30 | |
| 10.1.1 | 1 / 30 | |
| 10.1.0 | 1 / 30 | |
| 10.0.1 | 1 / 30 | |
| 10.0.0 | 1 / 30 | |
| 9.2.0 | 1 / 30 | |
| 9.1.0 | 1 / 25 | |
| 9.0.0 | 1 / 25 | |
| 8.0.0 | 1 / 25 | |
| 7.2.0 | 1 / 25 | |
| 7.1.0 | 1 / 25 | |
| 7.0.2 | 1 / 25 | |
| 7.0.1 | 1 / 25 | |
| 7.0.0 | 1 / 25 | |
| 6.0.0 | 2 / 28 | |
| 5.0.3 | 2 / 26 | |
| 5.0.2 | 2 / 26 | |
| 5.0.1 | 2 / 26 | |
| 5.0.0 | 2 / 26 | |
| 4.2.0 | 2 / 26 | |
| 4.1.0 | 2 / 26 | |
| 4.0.14 | 2 / 26 | |
| 4.0.13 | 2 / 26 | |
| 4.0.12 | 2 / 26 | |
| 4.0.11 | 2 / 26 | |
| 4.0.10 | 2 / 26 | |
| 4.0.9 | 2 / 26 | |
| 4.0.8 | 2 / 26 | |
| 4.0.7 | 2 / 26 | |
| 4.0.6 | 2 / 26 | |
| 4.0.5 | 2 / 26 | |
| 4.0.4 | 2 / 26 | |
| 4.0.3 | 2 / 26 | |
| 4.0.2 | 2 / 26 | |
| 4.0.1 | 2 / 26 | |
| 4.0.0 | 2 / 26 |
v13.3.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.3.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.3.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.3.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.2.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.2.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.2.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.1.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.0.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.0.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.9.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.8.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.8.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.7.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.7.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.7.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.6.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.6.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.5.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.5.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.5.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.5.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.4.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.4.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.4.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.4.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.4.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.4.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.3.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.3.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.3.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.3.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.2.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.2.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.2.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.0.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.0.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.