@angular-devkit/architect-cli
Angular Architect CLI
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | dormant-publish | AI (publish-pattern): google-wombot publishes Angular DevKit packages in batches; gaps between patch series are expected, not indicative of takeover. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): All added deps are established Angular ecosystem or well-known utility packages; consistent with CLI feature expansion. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase matches addition of legitimate CLI functionality and new deps; no obfuscation or payload indicators. | ai | |
| phantom-deps | phantom-dep:symbol-observable | AI (phantom-deps): symbol-observable is a peer/polyfill dep commonly referenced in config rather than direct imports; stable false positive for this package. | ai |
Versions (showing 51 of 177)
| Version | Deps | Published |
|---|---|---|
| 0.2102.19 | 1 / 0 | |
| 0.2102.18 | 1 / 0 | |
| 0.2102.17 | 1 / 0 | |
| 0.2102.16 | 1 / 0 | |
| 0.2102.15 | 1 / 0 | |
| 0.2102.14 | 1 / 0 | |
| 0.2102.13 | 1 / 0 | |
| 0.2102.12 | 1 / 0 | |
| 0.2102.11 | 1 / 0 | |
| 0.2102.10 | 1 / 0 | |
| 0.2102.9 | 1 / 0 | |
| 0.2102.8 | 1 / 0 | |
| 0.2102.7 | 1 / 0 | |
| 0.2102.6 | 1 / 0 | |
| 0.2102.5 | 1 / 0 | |
| 0.2102.4 | 1 / 0 | |
| 0.2102.3 | 1 / 0 | |
| 0.2102.2 | 1 / 0 | |
| 0.2102.1 | 1 / 0 | |
| 0.2102.0 | 1 / 0 | |
| 0.2101.5 | 1 / 0 | |
| 0.2101.4 | 1 / 0 | |
| 0.2101.3 | 1 / 0 | |
| 0.2101.2 | 1 / 0 | |
| 0.2101.1 | 1 / 0 | |
| 0.2101.0 | 1 / 0 | |
| 0.2100.6 | 5 / 0 | |
| 0.2100.5 | 5 / 0 | |
| 0.2100.4 | 5 / 0 | |
| 0.2100.3 | 5 / 0 | |
| 0.2100.2 | 5 / 0 | |
| 0.2100.1 | 5 / 0 | |
| 0.2100.0 | 5 / 0 | |
| 0.2003.32 | 5 / 0 | |
| 0.2003.31 | 5 / 0 | |
| 0.2003.30 | 5 / 0 | |
| 0.2003.29 | 5 / 0 | |
| 0.2003.28 | 5 / 0 | |
| 0.2003.27 | 5 / 0 | |
| 0.2003.26 | 5 / 0 | |
| 0.2003.25 | 5 / 0 | |
| 0.2003.24 | 5 / 0 | |
| 0.2003.23 | 5 / 0 | |
| 0.2003.22 | 5 / 0 | |
| 0.2003.21 | 5 / 0 | |
| 0.2003.20 | 5 / 0 | |
| 0.2003.19 | 5 / 0 | |
| 0.2003.18 | 5 / 0 | |
| 0.2003.17 | 5 / 0 | |
| 0.2003.16 | 5 / 0 | |
| 0.2003.15 | 5 / 0 |
v0.2102.19
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2102.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2003.32
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2003.31
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.