grunt-contrib-jshint — Greenflagged

Validate files with JSHint

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

cowboyjmeastkellenvladikoffshamasindresorhus

Keywords

gruntplugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
semgrep	semgrep:dynamic-require	AI (semgrep): Dynamic require is intentional plugin extensibility — loads user-specified JSHint reporter modules. This is documented behavior for grunt-contrib-jshint and stable across versions.	ai	2026/04/23
dependencies	unvetted-dep:hooker	AI (dependencies): hooker is a long-standing Grunt ecosystem utility dependency; its use here is stable and expected across all versions of this package.	ai	2026/04/23

Versions (showing 40 of 40)

Version	Deps	Published
3.2.0	3 / 3	2022-02-18
3.1.1	3 / 3	2021-10-02
3.1.0	3 / 3	2021-10-02
3.0.0	3 / 3	2020-10-20
2.1.0	3 / 3	2019-03-18
2.0.0	3 / 3	2018-09-23
1.1.0	3 / 3	2016-11-23
1.0.0	3 / 4	2016-02-17
0.12.0	2 / 4	2016-01-17
0.11.3	2 / 4	2015-09-03
0.11.2	2 / 4	2015-04-16
0.11.1	2 / 4	2015-03-20
0.11.0	2 / 3	2015-01-22
0.10.0	2 / 3	2014-04-02
0.9.2	2 / 3	2014-03-13
0.9.1	2 / 3	2014-03-12
0.9.0	2 / 3	2014-03-12
0.8.0	1 / 3	2013-12-25
0.7.2	1 / 3	2013-11-16
0.7.1	1 / 3	2013-10-31
0.7.0	1 / 3	2013-10-24
0.6.5	1 / 3	2013-10-24
0.6.4	1 / 3	2013-08-29
0.6.3	1 / 3	2013-08-15
0.6.2	1 / 3	2013-07-30
0.6.1	1 / 3	2013-07-28
0.6.0	1 / 3	2013-06-03
0.5.4	1 / 3	2013-05-22
0.5.3	1 / 3	2013-05-20
0.5.2	1 / 3	2013-05-19
0.5.1	1 / 3	2013-05-17
0.5.0	1 / 3	2013-05-17
0.4.3	1 / 3	2013-04-09
0.4.2	1 / 3	2013-04-08
0.4.1	1 / 3	2013-04-07
0.4.0	1 / 3	2013-04-05
0.3.0	1 / 3	2013-03-14
0.2.0	1 / 3	2013-02-26
0.1.1	1 / 3	2013-02-18
0.1.0	1 / 3	2013-01-08