npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of react-router, remix, generated . This is a read-only snapshot.
Run your own audit →

Audit of react-router, remix

Re-run this audit
Tracking daily next

Progress over time

Strong trust
57.1% (8) staged or trusted
Any trust
57.1% (8) incl. provenance
No trust signal
42.9% (6) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/249/2010/25
  1. 8/14 any trust
  2. 8/14 any trust
  3. ...
    8/14 any trust
  4. 8/14 any trust
  5. ...
    8/14 any trust
  6. ...
    8/14 any trust
  7. ...
    8/14 any trust
  8. 8/14 any trust
  9. ... [viewing]
    8/14 any trust
    1. [viewing]
  10. ...
    8/14 any trust
  11. 8/14 any trust
  12. ...
    8/14 any trust
  13. ...
    8/14 any trust
  14. ...
    8/14 any trust
  15. ...
    8/14 any trust
  16. ...
    8/14 any trust
  17. 8/14 any trust
  18. 8/14 any trust
  19. ...
    8/14 any trust
  20. ...
    8/14 any trust
  21. 8/14 any trust
  22. 8/14 any trust
  23. 8/14 any trust
  24. 8/14 any trust
  25. ...
    8/14 any trust
In scope
14
Staged publish
0
Trusted publisher
8
Provenance only
0
No trust signal
6
Deprecated latest
0
14 packages · click a column to sort
Package trust level report
@react-router/remix-routes-option-adapter8.4.0trusted publisherGitHub Actions128,194—
@react-router/dev8.4.0trusted publisherGitHub Actions1,648,714—
@react-router/express8.4.0trusted publisherGitHub Actions1,079,767—
@react-router/node8.4.0trusted publisherGitHub Actions1,748,920—
@react-router/serve8.4.0trusted publisherGitHub Actions866,277—
@react-router/architect8.4.0trusted publisherGitHub Actions2,643—
@react-router/fs-routes8.4.0trusted publisherGitHub Actions494,049—
@react-router/cloudflare8.4.0trusted publisherGitHub Actions37,198—
@react-router/remix-config-routes-adapter0.0.0-nightly-bf7ecb711-20240911nonemjackson1,478—
@react-router/remix-v2-routes0.0.0-nightly-a5f191b5e-20240820nonemjackson15—
@react-router/server-runtime0.0.0-experimental-c0856287fnonemjackson40—
@react-router/index0.0.0nonemjackson6—
@remix/storycap1.1.1nonethrowandgo7—
@remix/mapbox-gl-draw1.4.4nonerf-9—