← Home

@aliou/pi-guardrails

npm Repository Homepage
42
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

aliou

Keywords

pi-packagepi-extensionpiguardrailssecurity

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): GitHub Actions CI publish via SLSA attestation replaces gitHead as the source-commit link; expected for this workflow. ai
semgrep semgrep:etc-passwd-access AI (semgrep): Reference appears in a test fixture string testing that the guardrail correctly handles /etc/passwd access patterns. ai
provenance publisher-changed AI (provenance): Publisher changed to GitHub Actions with SLSA/Sigstore attestation from the package's own repo — expected CI/CD publishing pattern. ai
semgrep semgrep:ssh-key-access AI (semgrep): Patterns appear in a guardrails deny-list config (enabled: false) to block SSH key access, not to harvest credentials. ai
semgrep semgrep:credential-dir-access AI (semgrep): Same context: deny-list pattern in a security guardrails config, not credential harvesting code. ai

Versions (showing 42 of 42)

Version Deps Published
0.15.0 2 / 12
0.14.1 2 / 12
0.14.0 2 / 12
0.13.3 2 / 12
0.13.2 2 / 12
0.13.1 2 / 12
0.13.0 2 / 12
0.12.1 2 / 12
0.12.0 2 / 12
0.11.2 2 / 11
0.11.1 2 / 11
0.11.0 2 / 11
0.10.0 2 / 10
0.9.5 2 / 10
0.9.4 2 / 10
0.9.3 2 / 10
0.9.2 2 / 10
0.9.1 2 / 10
0.9.0 2 / 10
0.8.0 2 / 10
0.7.7 2 / 8
0.7.6 2 / 8
0.7.5 2 / 8
0.7.4 2 / 0
0.7.3 2 / 0
0.7.2 2 / 0
0.7.1 2 / 0
0.7.0 2 / 0
0.6.1 2 / 0
0.6.0 2 / 0
0.5.4 0 / 0
0.5.3 0 / 0
0.5.2 0 / 0
0.5.1 0 / 0
0.5.0 0 / 0
0.4.1 0 / 0
0.4.0 0 / 0
0.3.0 0 / 0
0.2.1 0 / 0
0.2.0 0 / 0
0.1.0 0 / 0
0.0.1 0 / 0