@yarnpkg/plugin-interactive-tools No license 2 versions

@yarnpkg/plugin-interactive-tools

npm Repository

Versions

—

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

arcanisyarnbot

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
phantom-deps	phantom-dep:ink	AI (phantom-deps): Bundled into compiled plugin output; not directly imported in source but legitimately used.	ai	2026/05/24
phantom-deps	phantom-dep:react	AI (phantom-deps): Bundled into compiled plugin output; not directly imported in source but legitimately used.	ai	2026/05/24
phantom-deps	phantom-dep:ink-text-input	AI (phantom-deps): Bundled into compiled plugin output; not directly imported in source but legitimately used.	ai	2026/05/24

Version	Deps	Published
4.1.0	10 / 7	2026-03-19
4.0.3	9 / 7	2025-06-03

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.