biomejs/biome

Name: biomejs/biome
Author: biomejs

COLLECTIONattested

biomejsApache-2.0Updated 2mo agonpm GitHub

A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.

This collection bundles

11 skills3 agents

⚠ The trust score below reflects the installer package @biomejs/biome only. The bundled units are not individually verified or scanned — review them before use.

Attested build

A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.

25kGitHub stars

1kForks

2mo agoLast update

Package

Authorbiomejs

LicenseApache-2.0

Sourcegithub

npm@biomejs/biome

GitHubbiomejs/biome

Trust Status

85/100Trusted

✓Listed in Forge index+10/10

✓Identity verified · attested build+20/20

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

✓npm Trusted Publishing (Sigstore)+5/5

—npm maintainer match+0/5

→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusIdentity verified

PublisherUnverified

SignatureUnsigned

Domain—

Provenance✓ Sigstore-verified · c0b9832

Dependencies✓ 0 resolved · none vulnerable

Tool surface—

Security scan✓ Cleanv2.5.0 · 2mo ago

EvalsNone

IndexedJun 14, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Keywords

cssformatterjavascriptjsonjsxlinterstatic-code-analysistypescriptwebcollection