← Home

react-rx

npm Repository Homepage
8
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

kmelvebjoergerexxarsskogsmaskintoninamattcraigjoneidejohnsenrubiozrobinpyonmariuslundgardsanity-ioevenwradhe_sanityrbottendanielsgrovesjudofyrryanblockobliadpdcilkemadkenfredcarlsenhermanwtambetsgulsethatombendersimeonsanitystipsansnorreebrankersrdunkmichael-sanityvincentquigleyritasdiaskenjonespizzajosh_sanity_iocngonzalez-sanityjjburbridgetdfka_rickryanbonial-sanityindrek.karnerashsergeisarvirorefiitodrewsanitykaspar.lippmaa.sanitydamsimen.svaletbesedadaniel.malmerjordanl17colepetersarmandocernajoan_miralles_paezchristianhgpedro-sanityjwoods-sanitytiit.kass.saitybinoy14pauloborgesfaushachrislarocquesanityrostimelkmattlewine.sanitymsfragalaadoprogtonysanitybetsongeorgedoescodemacdonsteoinsanitydashedstripesjmswrnrsnocorp_sanitymmgjfilmajsamhemgu-stavpatricksanitymads.mogenshojsanitytomsanity-cbsanitykevvictor.ayoguryanbethel_sanitybrianlerouxjohnsicilip10ekrlundjonahsnidermwrittertorbratsbergsanityevelinawahlstromjw-sanitybobinska.devoleg1357josef-sanitygabe.wyattkbrabrandannez-sanitysanityjamieblakelam_sanitylaurenashpolesanitygeoffballcarsten.schwesig

Keywords

actionbehaviorconcurrentes6eventsexternalhooksobservablesobservepipereactreact18react19reactiverealtimerxrxjssanitysanity-iostorestreamssubjectsuspensesynctypesafetypescriptuse

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:observable-callback AI (dependencies): observable-callback is a small RxJS utility fitting react-rx's purpose; stable dependency across versions. ai

Versions (showing 8 of 8)

Version Deps Published
4.2.2 3 / 28
4.2.1 3 / 29
4.2.0 3 / 29
4.1.32 3 / 29
4.1.31 3 / 27
4.1.30 3 / 27
4.1.29 3 / 27
4.1.28 3 / 27

v4.2.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.2.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.2.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.1.32

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.1.31

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.1.30

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.1.29

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.1.28

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.