← Home

@tscircuit/core

The core logic used to build Circuit JSON from tscircuit React elements.

100
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

seveibar

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata url-dep:@tscircuit/jlcpcb-manufacturing-specs AI (npm-metadata): SHA-pinned dep is in devDependencies pointing to same org; not included in published dist, stable pattern for this package. ai
phantom-deps phantom-dep:@flatten-js/core AI (phantom-deps): Declared dependency used in config; stable pattern for this package. ai
dependencies unvetted-dep:calculate-cell-boundaries AI (dependencies): Fits tscircuit geometry utility pattern; publisher has strong track record and this is a domain-appropriate dep. ai
dependencies unvetted-dep:react-reconciler-18 AI (dependencies): react-reconciler-18 is a version alias for [email protected], a standard React dual-version support pattern for this package. ai
phantom-deps phantom-dep:nanoid AI (phantom-deps): nanoid is declared and used; phantom-dep rule is a false positive for config-referenced dependencies. ai
phantom-deps phantom-dep:performance-now AI (phantom-deps): performance-now is declared and used; phantom-dep rule is a false positive for config-referenced dependencies. ai
typosquat typosquat.levenshtein:cors AI (typosquat): @tscircuit/core is a scoped package in the tscircuit ecosystem (circuit design framework), not a typosquat of 'cors'. The name similarity is purely coincidental; no brand impersonation. ai
dependencies unvetted-dep:transformation-matrix AI (dependencies): Matrix transformation library; appropriate for 2D coordinate transforms in circuit layout. ai
dependencies unvetted-dep:@lume/kiwi AI (dependencies): Legitimate constraint-solving library appropriate for circuit layout; no security concerns. ai
dependencies unvetted-dep:format-si-unit AI (dependencies): Small utility for SI unit formatting; appropriate for electronics tooling. ai
dependencies unvetted-dep:@flatten-js/core AI (dependencies): Geometry library for 2D operations; appropriate for circuit/PCB layout. ai
dependencies unvetted-dep:calculate-packing AI (dependencies): Packing algorithm library; appropriate for component placement in circuit design. ai
dependencies unvetted-dep:svg-path-commander AI (dependencies): SVG path manipulation library; appropriate for circuit-to-SVG rendering. ai

Versions (showing 100 of 791)

Version Deps Published
0.0.717 10 / 45
0.0.716 10 / 45
0.0.715 10 / 45
0.0.714 10 / 45
0.0.713 10 / 45
0.0.712 10 / 45
0.0.711 10 / 45
0.0.710 10 / 45
0.0.709 10 / 45
0.0.708 10 / 45
0.0.707 10 / 45
0.0.706 10 / 45
0.0.705 10 / 45
0.0.704 10 / 45
0.0.703 10 / 45
0.0.702 10 / 45
0.0.701 10 / 45
0.0.700 10 / 45
0.0.699 10 / 45
0.0.698 10 / 45
0.0.697 10 / 45
0.0.696 10 / 45
0.0.695 10 / 45
0.0.694 10 / 45
0.0.693 10 / 45
0.0.692 10 / 45
0.0.691 10 / 44
0.0.690 10 / 44
0.0.689 10 / 44
0.0.688 10 / 44
0.0.687 10 / 44
0.0.686 10 / 44
0.0.685 10 / 44
0.0.684 10 / 44
0.0.683 10 / 44
0.0.682 10 / 44
0.0.681 10 / 44
0.0.680 10 / 44
0.0.679 10 / 44
0.0.678 10 / 44
0.0.677 10 / 44
0.0.676 10 / 44
0.0.675 10 / 44
0.0.674 10 / 44
0.0.673 10 / 44
0.0.672 10 / 44
0.0.671 10 / 44
0.0.670 10 / 44
0.0.669 10 / 44
0.0.668 10 / 44
0.0.667 10 / 44
0.0.666 10 / 44
0.0.665 10 / 44
0.0.664 10 / 44
0.0.663 10 / 44
0.0.662 10 / 44
0.0.661 10 / 44
0.0.660 10 / 44
0.0.659 10 / 44
0.0.658 10 / 44
0.0.657 10 / 44
0.0.656 10 / 44
0.0.655 10 / 44
0.0.654 10 / 44
0.0.653 10 / 44
0.0.652 10 / 44
0.0.651 10 / 44
0.0.650 10 / 44
0.0.649 10 / 45
0.0.648 10 / 45
0.0.647 10 / 45
0.0.646 10 / 45
0.0.645 10 / 43
0.0.644 10 / 43
0.0.641 11 / 43
0.0.637 11 / 43
0.0.624 11 / 42
0.0.621 11 / 42
0.0.617 11 / 41
0.0.616 11 / 42
0.0.613 11 / 42
0.0.612 11 / 42
0.0.611 11 / 42
0.0.610 11 / 42
0.0.607 11 / 42
0.0.605 11 / 40
0.0.604 11 / 40
0.0.603 11 / 40
0.0.600 11 / 40
0.0.599 11 / 41
0.0.597 11 / 41
0.0.592 11 / 41
0.0.587 11 / 41
0.0.583 11 / 41
0.0.577 11 / 40
0.0.576 9 / 40
0.0.575 9 / 40
0.0.574 9 / 40
0.0.569 9 / 40
0.0.568 9 / 40
Showing 100 of 791 Next page →

v0.0.717

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.704

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.701

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.675

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.664

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.647

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.641

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.637

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.624

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.621

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.617

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.616

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.613

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.612

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.611

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.610

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.607

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.605

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.604

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.603

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.600

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.599

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.597

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.592

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.587

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.583

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.577

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.576

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.575

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.574

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.569

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.0.568

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.