@apollo-annotation/shared
9
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
garrettjstevensdariober
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): generic-filehandle2 is a legitimate GMOD bioinformatics utility, consistent with this package's JBrowse/genomics ecosystem. | ai | |
| provenance | no-provenance | AI (provenance): No provenance across all 29 versions; consistent pattern for this package, not a new regression. | ai | |
| dependencies | unvetted-dep:@apollo-annotation/common | AI (dependencies): Sibling monorepo package from GMOD/Apollo3; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@apollo-annotation/schemas | AI (dependencies): Sibling monorepo package from GMOD/Apollo3; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@gmod/indexedfasta | AI (phantom-deps): Referenced in config files per analyzer; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:generic-filehandle2 | AI (phantom-deps): Referenced in config files per analyzer; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@apollo-annotation/mst | AI (dependencies): Sibling monorepo package from GMOD/Apollo3; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit TypeScript runtime dependency; phantom-dep false positive for TS packages. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Monorepo sub-package pattern; absence of description is cosmetic, not a risk signal here. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Monorepo sub-package; missing metadata (description, repo URL, keywords) is typical for internal shared packages, not spam. | ai |