← Home

@balena/odata-to-abstract-sql

29
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

balena.iopage

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance slsa-provenance AI (provenance): Balena org uses GitHub Actions CI/CD with SLSA attestation; stable publishing pattern going forward. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy explained by migration to GitHub Actions publishing; SLSA attestation confirms legitimate CI origin. ai
provenance publisher-changed AI (provenance): Transition from balena.io account to GitHub Actions is a documented CI/CD migration pattern for this org; SLSA attestation corroborates legitimacy. ai
phantom-deps phantom-dep:@types/lodash AI (phantom-deps): @types/lodash is a TypeScript type declaration package; declared in dependencies for consumers, not directly imported. ai
phantom-deps phantom-dep:@types/memoizee AI (phantom-deps): @types/memoizee is a TypeScript type declaration package; declared in dependencies for consumers, not directly imported. ai
phantom-deps phantom-dep:@types/string-hash AI (phantom-deps): @types/string-hash is a TypeScript type declaration package; declared in dependencies for consumers, not directly imported. ai

Versions (showing 29 of 29)

Version Deps Published
10.0.28 8 / 16
10.0.27 8 / 16
10.0.26 8 / 16
10.0.25 8 / 16
10.0.24 8 / 16
10.0.23 8 / 16
10.0.22 8 / 16
10.0.21 8 / 16
10.0.20 8 / 16
10.0.19 8 / 16
10.0.18 8 / 16
10.0.17 8 / 16
10.0.16 8 / 16
10.0.15 8 / 16
10.0.14 8 / 16
10.0.13 8 / 16
10.0.12 8 / 16
10.0.11 8 / 16
10.0.10 8 / 16
10.0.9 8 / 16
10.0.8 8 / 16
10.0.7 8 / 16
10.0.6 8 / 16
10.0.5 8 / 16
10.0.4 8 / 16
10.0.3 8 / 16
10.0.2 8 / 16
10.0.1 8 / 16
10.0.0 8 / 16