es-get-iterator

Get an iterator for any JS language value. Works robustly across all environments, all versions.

Supply chain provenance

Status for the latest visible version.

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

Keywords

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
dependencies	unvetted-dep:is-map	AI (dependencies): is-map is a well-known ljharb/tc39 ecosystem utility; expected dependency for this package.	ai	2026/04/21
dependencies	unvetted-dep:is-set	AI (dependencies): is-set is a well-known ljharb/tc39 ecosystem utility; expected dependency for this package.	ai	2026/04/21
dependencies	unvetted-dep:call-bind	AI (dependencies): call-bind is a standard ljharb utility used across the ECMAScript spec-compliance ecosystem.	ai	2026/04/21
dependencies	unvetted-dep:is-string	AI (dependencies): is-string is a standard ljharb utility; expected dependency for iterator type-checking.	ai	2026/04/21
dependencies	unvetted-dep:is-arguments	AI (dependencies): is-arguments is a standard ljharb utility; expected dependency for iterator type-checking.	ai	2026/04/21
dependencies	unvetted-dep:get-intrinsic	AI (dependencies): get-intrinsic is a core ljharb/tc39 utility for safe access to JS intrinsics; expected here.	ai	2026/04/21
dependencies	unvetted-dep:stop-iteration-iterator	AI (dependencies): stop-iteration-iterator is a ljharb utility for legacy iterator protocol support; expected for this package.	ai	2026/04/21
provenance	no-provenance	AI (provenance): Established package from a highly trusted publisher; lack of provenance is not a meaningful risk signal here.	ai	2026/04/21

Version	Deps	Published
1.1.3	9 / 14	2023-01-13
1.1.2	8 / 13	2021-01-26
1.1.1	8 / 13	2020-11-06
1.1.0	7 / 12	2020-01-26
1.0.2	7 / 12	2019-12-16
1.0.1	7 / 12	2019-11-28
1.0.0	7 / 12	2019-11-26