@backstage/plugin-kubernetes-node
Node.js library for the kubernetes plugin
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@backstage/types | AI (dependencies): First-party Backstage monorepo package; unvetted only due to review system state, not suspicious. | ai | |
| dependencies | unvetted-dep:@backstage/backend-plugin-api | AI (dependencies): First-party Backstage monorepo package; unvetted only due to review system state, not suspicious. | ai | |
| dependencies | unvetted-dep:@backstage/plugin-kubernetes-common | AI (dependencies): First-party Backstage monorepo package; part of the same kubernetes plugin family. | ai | |
| phantom-deps | phantom-dep:winston | AI (phantom-deps): Winston is a standard logging dependency in Backstage backend plugins; loaded by convention in this architecture. | ai | |
| phantom-deps | phantom-dep:@types/express | AI (phantom-deps): Framework-scoped type package used by convention in Backstage backend plugins; not a security concern. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Short README and missing keywords are typical of internal library packages in large monorepos like Backstage; not indicative of spam. | ai |
Versions (showing 41 of 41)
| Version | Deps | Published |
|---|---|---|
| 0.4.6 | 7 / 7 | |
| 0.4.5 | 7 / 7 | |
| 0.4.4 | 7 / 7 | |
| 0.4.3 | 8 / 7 | |
| 0.4.2 | 8 / 7 | |
| 0.4.1 | 8 / 7 | |
| 0.4.0 | 8 / 7 | |
| 0.3.6 | 7 / 7 | |
| 0.3.5 | 7 / 7 | |
| 0.3.4 | 7 / 7 | |
| 0.3.3 | 7 / 7 | |
| 0.3.2 | 7 / 7 | |
| 0.3.1 | 7 / 7 | |
| 0.3.0 | 7 / 7 | |
| 0.2.5 | 7 / 8 | |
| 0.2.4 | 7 / 8 | |
| 0.2.3 | 7 / 8 | |
| 0.2.2 | 7 / 8 | |
| 0.2.1 | 7 / 8 | |
| 0.2.0 | 7 / 8 | |
| 0.1.20 | 7 / 8 | |
| 0.1.19 | 7 / 8 | |
| 0.1.18 | 7 / 8 | |
| 0.1.17 | 7 / 8 | |
| 0.1.16 | 7 / 7 | |
| 0.1.15 | 7 / 7 | |
| 0.1.14 | 7 / 7 | |
| 0.1.13 | 7 / 7 | |
| 0.1.12 | 7 / 7 | |
| 0.1.11 | 7 / 7 | |
| 0.1.10 | 7 / 7 | |
| 0.1.9 | 7 / 7 | |
| 0.1.8 | 7 / 7 | |
| 0.1.7 | 7 / 7 | |
| 0.1.6 | 7 / 7 | |
| 0.1.5 | 7 / 7 | |
| 0.1.4 | 7 / 7 | |
| 0.1.3 | 4 / 1 | |
| 0.1.2 | 4 / 1 | |
| 0.1.1 | 3 / 1 | |
| 0.1.0 | 3 / 1 |
v0.4.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.20
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.19
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.16
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.15
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.14
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.1.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.1.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.