eslint-plugin-react-rsc
ESLint React's ESLint plugin for RSC related rules.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Package has 348 versions and 361k weekly downloads; 0.0.0 was a pre-release convention, not a malicious placeholder. Stable false positive for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): ESLint plugins are inherently small; download volume (361k/week) and version count (348) confirm this is a legitimate, actively-maintained package despite missing metadata fields. | ai | |
| phantom-deps | phantom-dep:ts-pattern | AI (phantom-deps): Declared runtime dep; likely inlined/bundled by tsdown build tool. Not a security concern for this monorepo package. | ai | |
| dependencies | unvetted-dep:@eslint-react/ast | AI (dependencies): Sibling package from the same eslint-react monorepo by Rel1cx, pinned to matching version. Expected dependency structure. | ai | |
| phantom-deps | phantom-dep:@typescript-eslint/scope-manager | AI (phantom-deps): Declared runtime dep; referenced in config/type contexts typical for ESLint plugins. Not a security concern. | ai | |
| phantom-deps | phantom-dep:@typescript-eslint/type-utils | AI (phantom-deps): Declared runtime dep; referenced in config/type contexts typical for ESLint plugins. Not a security concern. | ai | |
| dependencies | unvetted-dep:@eslint-react/var | AI (dependencies): Sibling package from the same eslint-react monorepo by Rel1cx, pinned to matching version. Expected dependency structure. | ai |
Versions (showing 43 of 43)
| Version | Deps | Published |
|---|---|---|
| 5.8.8 | 7 / 8 | |
| 5.8.7 | 7 / 8 | |
| 5.8.6 | 7 / 8 | |
| 5.8.5 | 7 / 8 | |
| 5.8.4 | 7 / 8 | |
| 5.8.3 | 7 / 8 | |
| 5.8.2 | 7 / 8 | |
| 5.8.1 | 7 / 8 | |
| 5.8.0 | 7 / 8 | |
| 5.7.10 | 7 / 8 | |
| 5.7.9 | 7 / 8 | |
| 5.7.8 | 7 / 8 | |
| 5.7.7 | 7 / 8 | |
| 5.7.6 | 7 / 8 | |
| 5.7.5 | 7 / 8 | |
| 5.7.4 | 7 / 8 | |
| 5.7.3 | 7 / 8 | |
| 5.7.2 | 7 / 8 | |
| 5.7.1 | 7 / 8 | |
| 5.7.0 | 7 / 8 | |
| 5.6.6 | 7 / 8 | |
| 5.6.4 | 7 / 8 | |
| 5.6.2 | 7 / 8 | |
| 5.6.0 | 7 / 8 | |
| 4.2.3 | 8 / 6 | |
| 4.2.1 | 8 / 6 | |
| 3.0.0 | 8 / 6 | |
| 2.13.0 | 6 / 4 | |
| 2.12.4 | 6 / 4 | |
| 2.12.2 | 6 / 4 | |
| 2.12.1 | 6 / 4 | |
| 2.12.0 | 6 / 4 | |
| 2.11.2 | 6 / 4 | |
| 2.11.1 | 6 / 4 | |
| 2.11.0 | 6 / 4 | |
| 2.10.1 | 6 / 4 | |
| 2.10.0 | 6 / 4 | |
| 2.9.4 | 6 / 4 | |
| 2.9.3 | 6 / 4 | |
| 2.9.2 | 6 / 4 | |
| 2.9.1 | 6 / 4 | |
| 2.9.0 | 6 / 4 | |
| 0.0.0 | 0 / 1 |
v5.8.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.8.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.8.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.8.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.8.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.8.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.8.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.8.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.8.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.7.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.6.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.6.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.6.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.6.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.2.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.2.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.13.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.12.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.12.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.12.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.12.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.11.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.11.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.11.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.10.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.10.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.9.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.9.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.9.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.9.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.9.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.