All @ardatan/relay-compiler versions

@ardatan/relay-compiler@13.0.1-alpha-20260402124612-24ec6cc4124f3837bc98c4c819b029a308021814 rejected Risk: 0 MIT

@ardatan/relay-compiler @13.0.1-alpha-20260402124612-24ec6cc4124f3837bc98c4c819b029a308021814

rejected
This version was rejected. It did not pass GreenFlagged's security review and is not served by the registry. The findings and risk dispositions below explain why.
npm Repository Homepage Tarball
0
Risk Score
MIT
License
No
Install Scripts
3
Dependencies
0
Dev Dependencies
104.0 KB
Package Size
Published

Fork of `relay-compiler`

Maintainers

ardatan

Keywords

graphqlrelay

Dependencies (3)

PackageConstraintRegistry Status
immutable ^5.1.5 auto_approved
invariant ^2.2.4 auto_approved
@babel/runtime ^7.29.2 auto_approved

Transitive Dependency Tree

5 transitive deps max depth 3
  ├─ @babel/runtime ^7.29.2 → 7.29.2
  ├─ immutable ^5.1.5 → 5.1.5
├─ invariant ^2.2.4 → 2.2.4
├─ loose-envify ^1.0.0 → 1.4.0
  ├─ js-tokens ^3.0.0 || ^4.0.0 → 4.0.0

Changes from v13.0.1-alpha-20260402124024-0f177687f3b0ba50d9d96700e2197994bd749702

No metadata changes detected.

File Changes

0 added 0 removed 2 modified size delta: .0 KB

SAST Findings (2)

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

INFO Publisher changed: ardatan → GitHub Actions (on 2026-04-02) provenance

[Accepted risk] This version was published by a different npm account than previous versions on 2026-04-02. This could indicate a legitimate maintainer transition or an account compromise.

Review Summary

Risk score: 0. Findings: 8 info (+0).

Commit: 24ec6cc4124f Browse source

Published to npm: