eslint-plugin-unused-imports MIT 30 versions

eslint-plugin-unused-imports

npm Repository Homepage

Report and remove unused es6 modules

30

Versions

MIT

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

antfusweepline

Keywords

eslinteslintplugineslint-pluginimportunusedmodulesautofix

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	missing-githead	AI (provenance): Expected when transitioning to GitHub Actions publishing; SLSA provenance attestation compensates.	ai	2026/04/23
provenance	publisher-changed	AI (provenance): Transition from antfu to GitHub Actions CI/CD publishing with SLSA provenance; legitimate automation change.	ai	2026/04/23
bogus-package	bogus-package	AI (bogus-package): antfu (Anthony Fu) is a prominent OSS maintainer (Vue/Vite core); spam flag is a false positive.	ai	2026/04/23

Versions (showing 30 of 30)

Version	Deps	Published
4.4.1	0 / 17	2026-02-09
4.3.0	0 / 17	2025-10-19
4.2.0	0 / 17	2025-08-18
4.1.4	0 / 16	2024-09-13
4.1.3	0 / 16	2024-08-10
4.1.2	0 / 16	2024-08-08
4.1.1	0 / 16	2024-08-08
4.1.0	0 / 16	2024-08-08
4.0.1	1 / 6	2024-07-22
4.0.0	1 / 6	2024-05-24
3.2.0	1 / 6	2024-04-30
3.1.0	1 / 6	2024-02-13
3.0.0	1 / 4	2023-07-11
2.0.0	1 / 4	2021-11-10
1.1.5	1 / 5	2021-09-24
1.1.4	1 / 5	2021-08-17
1.1.3	1 / 5	2021-08-09
1.1.2	1 / 6	2021-07-01
1.1.1	1 / 6	2021-03-30
1.1.0	1 / 6	2021-02-08
1.0.3	2 / 6	2021-02-05
1.0.2	1 / 6	2021-02-05
1.0.1	5 / 3	2020-11-26
1.0.0	5 / 3	2020-10-23
0.1.3	5 / 4	2020-05-04
0.1.2	5 / 4	2019-12-09
0.1.1	5 / 4	2019-11-27
0.1.0	5 / 4	2019-09-18
0.0.3	3 / 1	2019-09-18
0.0.2	1 / 3	2019-09-18

v4.4.1

3 findings

HIGH Missing gitHead — previous versions had it provenance

This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.

HIGH Publisher changed: antfu → GitHub Actions (on 2026-02-09) provenance

This version was published by a different npm account than previous versions on 2026-02-09. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.3.0

2 findings

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Missing gitHead — previous versions had it provenance

[Accepted risk] This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: antfu.

v4.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.1.4

2 findings

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Missing gitHead — previous versions had it provenance

[Accepted risk] This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: antfu.

v4.1.3

2 findings

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Missing gitHead — previous versions had it provenance

[Accepted risk] This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: antfu.

v4.1.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.1.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.1.0

2 findings

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: sweepline → antfu (on 2024-08-08) provenance

[Accepted risk] This version was published by a different npm account than previous versions on 2024-08-08. This could indicate a legitimate maintainer transition or an account compromise.

v4.0.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.