@adonisjs/lucid
9
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
romainlanzvirkjulien-r44
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:uuid | AI (typosquat): Scoped @adonisjs/lucid is a well-known SQL ORM; Levenshtein proximity to 'uuid' is coincidental, not impersonation. | ai | |
| dependencies | unvetted-dep:igniculus | AI (dependencies): igniculus is a SQL syntax highlighter used by Lucid for query logging; stable dependency with no malicious indicators. | ai | |
| dependencies | unvetted-dep:knex-dynamic-connection | AI (dependencies): knex-dynamic-connection is a well-known Knex plugin for dynamic DB connections; stable use in this ORM context. | ai | |
| dependencies | unvetted-dep:@adonisjs/presets | AI (dependencies): First-party @adonisjs scoped package; part of the same ecosystem and publisher org. | ai |