@accounter/payper-mesh
Graphql proxy for Payper API
7
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
gilgardosh
Keywords
paypergraphqlmeshaccountancyaccountant
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@graphql-mesh/cross-helpers | AI (phantom-deps): GraphQL Mesh config-driven dependency; not directly imported but required at runtime. | ai | |
| phantom-deps | phantom-dep:@graphql-mesh/utils | AI (phantom-deps): GraphQL Mesh config-driven dependency; not directly imported but required at runtime. | ai | |
| phantom-deps | phantom-dep:@graphql-mesh/runtime | AI (phantom-deps): GraphQL Mesh config-driven dependency; not directly imported but required at runtime. | ai | |
| phantom-deps | phantom-dep:@graphql-mesh/json-schema | AI (phantom-deps): GraphQL Mesh config-driven dependency; not directly imported but required at runtime. | ai | |
| phantom-deps | phantom-dep:graphql | AI (phantom-deps): GraphQL Mesh config-driven dependency; not directly imported but required at runtime. | ai | |
| phantom-deps | phantom-dep:@graphql-mesh/http | AI (phantom-deps): GraphQL Mesh config-driven dependency; not directly imported but required at runtime. | ai | |
| phantom-deps | phantom-dep:@graphql-mesh/store | AI (phantom-deps): GraphQL Mesh config-driven dependency; not directly imported but required at runtime. | ai | |
| phantom-deps | phantom-dep:@graphql-mesh/types | AI (phantom-deps): GraphQL Mesh config-driven dependency; not directly imported but required at runtime. | ai | |
| phantom-deps | phantom-dep:@graphql-mesh/config | AI (phantom-deps): GraphQL Mesh config dependencies are referenced in config files, not code; stable pattern. | ai | |
| phantom-deps | phantom-dep:@graphql-mesh/transform-rename | AI (phantom-deps): GraphQL Mesh transform plugins referenced in config; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:path | AI (phantom-deps): path is a Node.js polyfill; legitimately declared but not directly imported in code. | ai |
Versions (showing 7 of 7)
| Version | Deps | Published |
|---|---|---|
| 0.2.10 | 11 / 0 | |
| 0.2.7 | 11 / 0 | |
| 0.2.6 | 11 / 0 | |
| 0.2.5 | 11 / 0 | |
| 0.2.4 | 11 / 0 | |
| 0.2.2 | 11 / 0 | |
| 0.2.0 | 11 / 3 |
v0.2.4
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.2
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.