@bitsocial/bitsocial-cli
Command line interface to Bitsocial API
8
Versions
GPL-3.0-or-later
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
tomcasaburirinse12
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:undici | AI (phantom-deps): undici is a well-known Node.js HTTP client; likely used as an indirect/transitive dep in this CLI package. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit runtime dep for TypeScript-compiled packages; stable false positive. | ai | |
| phantom-deps | phantom-dep:typescript | AI (phantom-deps): typescript referenced in tsconfig/build config; not a direct import by design. | ai | |
| phantom-deps | phantom-dep:@oclif/plugin-help | AI (phantom-deps): oclif plugins declared in oclif config, not imported directly; standard oclif pattern. | ai | |
| phantom-deps | phantom-dep:@oclif/plugin-not-found | AI (phantom-deps): Same as plugin-help; oclif config reference, not a direct import. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Postinstall downloads SHA256-verified web UI assets; same script is explicitly used in CI; benign for this package. | ai |