eslint-config-sukka MIT 19 versions

eslint-config-sukka

npm Repository Homepage

Sukka's ESLint config

19

Versions

MIT

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sukkaw

Keywords

eslint-config

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
dependencies	unvetted-dep:eslint-plugin-paths	AI (dependencies): Small eslint plugin dependency; no malware indicators; stable for this config package.	ai	2026/05/26
dependencies	unvetted-dep:eslint-plugin-autofix	AI (dependencies): Small eslint plugin dependency; no malware indicators; stable for this config package.	ai	2026/05/26
email-domain	unclaimed-email:https://skk.moe	AI (email-domain): skk.moe is the author's active personal site used as a URL in the author field, not an email domain; stable false positive for this package.	ai	2026/05/26
provenance	slsa-provenance	AI (provenance): SLSA provenance via Sigstore is a strong supply chain integrity signal; stable for this package.	ai	2026/05/21

Versions (showing 19 of 19)

Version	Deps	Published
8.10.4	21 / 9	2026-05-16
8.10.3	21 / 9	2026-05-14
8.10.2	21 / 9	2026-05-03
8.10.1	21 / 9	2026-04-30
8.10.0	21 / 9	2026-04-29
8.9.4	21 / 8	2026-04-28
8.9.3	21 / 8	2026-04-16
8.9.2	21 / 8	2026-04-08
8.9.1	21 / 8	2026-04-03
8.9.0	21 / 8	2026-03-21
8.8.0	21 / 8	2026-03-15
8.7.1	21 / 8	2026-03-02
8.7.0	21 / 8	2026-02-23
8.6.5	21 / 8	2026-02-23
8.6.4	22 / 8	2026-02-22
8.0.4	23 / 8	2025-11-13
8.0.3	23 / 8	2025-11-11
8.0.2	22 / 10	2025-10-25
8.0.0	22 / 10	2025-10-22

v8.10.4

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.10.3

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.10.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.10.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.10.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.9.4

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.9.3

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.9.2

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.9.1

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.9.0

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.8.0

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.7.1

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.7.0

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.6.5

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.6.4

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.0.4

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.0.3

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.0.2

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.0.0

2 findings

HIGH Unclaimed maintainer email domain: https://skk.moe email-domain

Maintainer email 'https://skk.moe' uses domain 'https://skk.moe' which has no DNS records. An attacker could register this domain to hijack the maintainer identity.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.