← Home

@ajna-inc/workflow

31
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

vinaysingh8866

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@ajna-inc/payments AI (phantom-deps): Same-org sibling dependency; phantom-dep heuristic is a stable false positive for this package. ai
provenance missing-githead AI (provenance): Established package with 27 versions; missing gitHead in one release is low risk given no other malware indicators. ai
bogus-package bogus-package AI (bogus-package): Scoped org package with real dependencies and Apache-2.0 license; sparse metadata is common for internal/org packages. ai
phantom-deps phantom-dep:rxjs AI (phantom-deps): Config-referenced utility; stable pattern for this scoped package. ai
phantom-deps phantom-dep:class-validator AI (phantom-deps): Config-referenced utility; stable pattern for this scoped package. ai
phantom-deps phantom-dep:class-transformer AI (phantom-deps): Config-referenced utility; stable pattern for this scoped package. ai

Versions (showing 31 of 31)

Version Deps Published
0.6.83 9 / 5
0.6.82 9 / 5
0.6.8 9 / 5
0.6.7 9 / 5
0.6.6 9 / 5
0.6.5 9 / 5
0.6.4 9 / 5
0.6.3 9 / 5
0.6.2 9 / 5
0.6.1 9 / 5
0.5.51 4 / 10
0.5.50 4 / 10
0.5.49 4 / 10
0.5.48 4 / 10
0.5.47 4 / 10
0.5.46 4 / 10
0.5.45 4 / 10
0.5.44 4 / 10
0.5.43 4 / 10
0.5.42 4 / 10
0.5.41 4 / 10
0.5.40 4 / 10
0.5.39 4 / 10
0.5.38 4 / 10
0.5.37 4 / 10
0.5.36 4 / 10
0.5.35 4 / 10
0.5.32 6 / 8
0.5.31 6 / 8
0.5.30 6 / 8
0.5.17 6 / 8