@blue-quickjs/dv
11
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
kamilgruszkam.jonak-bluepiotrblue
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped package under @blue-quickjs org; short name collision with 'pg' is coincidental, not impersonation. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped package under @blue-quickjs org; short name collision with 'qs' is coincidental, not impersonation. | ai | |
| typosquat | typosquat.levenshtein:ajv | AI (typosquat): Scoped package under @blue-quickjs org; short name collision with 'ajv' is coincidental, not impersonation. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a declared runtime dependency; phantom-dep false positive for TypeScript helper library. | ai |