← Home

semantic-release

npm Repository Homepage

Automated semver compliant package publishing

100
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

pvdlgsemantic-release-botgr2mtravi

Keywords

authorautomationchangelogmodulepackagepublishreleasesemverversion

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): semantic-release migrated publishing to GitHub Actions CI/CD with SLSA provenance attestation; this publisher change is legitimate and verifiable for this package. ai
dependencies unvetted-dep:figures AI (dependencies): figures is a well-known sindresorhus terminal symbols utility; a legitimate, benign dependency for semantic-release's CLI output. ai
phantom-deps phantom-dep:@semantic-release/github AI (phantom-deps): Default plugin loaded dynamically at runtime. Same pattern as @semantic-release/npm — stable false positive. ai
semgrep semgrep:env-spread AI (semgrep): semantic-release is CI/CD tooling that intentionally propagates process.env to child git processes. This is expected behavior, not a vulnerability, and is stable across all versions. ai
phantom-deps phantom-dep:@semantic-release/release-notes-generator AI (phantom-deps): Default plugin loaded dynamically at runtime. Stable false positive for this plugin-based architecture. ai
phantom-deps phantom-dep:@semantic-release/commit-analyzer AI (phantom-deps): Default plugin loaded dynamically at runtime. Stable false positive for this plugin-based architecture. ai
phantom-deps phantom-dep:@semantic-release/npm AI (phantom-deps): Default plugin loaded dynamically at runtime via resolve-from/import-from-esm; static import analysis cannot detect this pattern. Stable false positive for this package. ai

Versions (showing 100 of 325)

Version Deps Published
16.0.2 28 / 18
16.0.1 28 / 18
16.0.0 28 / 18
15.14.0 26 / 18
15.13.32 26 / 18
15.13.31 26 / 18
15.13.30 26 / 18
15.13.29 26 / 18
15.13.28 26 / 18
15.13.27 26 / 18
15.13.26 26 / 18
15.13.25 26 / 18
15.13.24 26 / 18
15.13.23 26 / 18
15.13.22 26 / 18
15.13.21 26 / 18
15.13.20 26 / 20
15.13.19 26 / 20
15.13.18 26 / 20
15.13.17 26 / 20
15.13.16 26 / 20
15.13.15 26 / 20
15.13.14 26 / 20
15.13.13 26 / 20
15.13.12 26 / 20
15.13.11 26 / 20
15.13.10 26 / 20
15.13.9 26 / 20
15.13.8 26 / 20
15.13.7 26 / 20
15.13.6 26 / 20
15.13.5 26 / 20
15.13.4 26 / 20
15.13.3 26 / 20
15.13.2 26 / 20
15.13.1 26 / 20
15.13.0 26 / 20
15.12.5 26 / 20
15.12.4 26 / 20
15.12.3 26 / 20
15.12.2 26 / 20
15.12.1 26 / 20
15.12.0 26 / 20
15.11.0 26 / 20
15.10.8 26 / 20
15.10.7 26 / 20
15.10.6 26 / 20
15.10.5 27 / 20
15.10.4 27 / 20
15.10.3 27 / 20
15.10.2 27 / 20
15.10.1 27 / 20
15.10.0 27 / 20
15.9.17 27 / 20
15.9.16 27 / 20
15.9.15 27 / 20
15.9.14 27 / 20
15.9.13 27 / 20
15.9.12 27 / 20
15.9.11 27 / 20
15.9.10 27 / 20
15.9.9 27 / 20
15.9.8 27 / 19
15.9.7 27 / 19
15.9.6 27 / 19
15.9.5 27 / 19
15.9.4 27 / 19
15.9.3 27 / 19
15.9.2 27 / 19
15.9.1 27 / 19
15.9.0 27 / 19
15.8.1 26 / 19
15.8.0 26 / 19
15.7.2 26 / 19
15.7.1 26 / 19
15.7.0 26 / 19
15.6.6 26 / 19
15.6.5 26 / 19
15.6.4 26 / 19
15.6.3 26 / 19
15.6.2 26 / 19
15.6.1 26 / 19
15.6.0 26 / 19
15.5.5 26 / 19
15.5.4 26 / 19
15.5.3 26 / 19
15.5.2 26 / 19
15.5.1 26 / 19
15.5.0 26 / 19
15.4.4 25 / 19
15.4.3 25 / 19
15.4.2 25 / 19
15.4.1 25 / 19
15.4.0 25 / 19
15.3.2 25 / 19
15.3.1 25 / 19
15.3.0 25 / 19
15.2.0 25 / 19
15.1.11 25 / 19
15.1.10 25 / 19
Showing 100 of 325 Next page →