@aeriajs/validation
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:validator | AI (typosquat): Scoped @aeriajs monorepo package; not a typosquat of validator. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Internal monorepo package; sparse metadata and small dist are expected for this package type. | ai |
Versions (showing 51 of 154)
| Version | Deps | Published |
|---|---|---|
| 0.0.199 | 0 / 4 | |
| 0.0.198 | 0 / 4 | |
| 0.0.197 | 0 / 4 | |
| 0.0.196 | 0 / 4 | |
| 0.0.195 | 0 / 4 | |
| 0.0.194 | 0 / 4 | |
| 0.0.193 | 0 / 4 | |
| 0.0.192 | 0 / 4 | |
| 0.0.191 | 0 / 4 | |
| 0.0.190 | 0 / 4 | |
| 0.0.189 | 0 / 4 | |
| 0.0.188 | 0 / 4 | |
| 0.0.187 | 0 / 4 | |
| 0.0.186 | 0 / 4 | |
| 0.0.185 | 0 / 4 | |
| 0.0.184 | 0 / 4 | |
| 0.0.183 | 0 / 4 | |
| 0.0.182 | 0 / 4 | |
| 0.0.181 | 0 / 4 | |
| 0.0.180 | 0 / 4 | |
| 0.0.179 | 0 / 4 | |
| 0.0.178 | 0 / 4 | |
| 0.0.177 | 0 / 4 | |
| 0.0.176 | 0 / 4 | |
| 0.0.175 | 0 / 4 | |
| 0.0.174 | 0 / 4 | |
| 0.0.173 | 0 / 4 | |
| 0.0.172 | 0 / 4 | |
| 0.0.171 | 0 / 4 | |
| 0.0.170 | 0 / 4 | |
| 0.0.169 | 0 / 4 | |
| 0.0.168 | 0 / 4 | |
| 0.0.167 | 0 / 4 | |
| 0.0.166 | 0 / 4 | |
| 0.0.165 | 0 / 4 | |
| 0.0.164 | 0 / 4 | |
| 0.0.163 | 0 / 4 | |
| 0.0.162 | 0 / 3 | |
| 0.0.161 | 0 / 3 | |
| 0.0.160 | 0 / 3 | |
| 0.0.159 | 0 / 3 | |
| 0.0.158 | 0 / 3 | |
| 0.0.157 | 0 / 3 | |
| 0.0.156 | 0 / 3 | |
| 0.0.155 | 0 / 3 | |
| 0.0.154 | 0 / 3 | |
| 0.0.153 | 0 / 3 | |
| 0.0.152 | 0 / 3 | |
| 0.0.151 | 0 / 3 | |
| 0.0.150 | 0 / 3 | |
| 0.0.149 | 0 / 3 |
v0.0.157
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.156
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.155
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.154
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.153
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.152
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.151
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.150
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.149
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.