← Home

@bobfrankston/rmfc

npm Repository Homepage

RMF Common Utilities

51
Versions
ISC
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

bobfrankston

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
vendored-integrity unresolved-vendored-tree:tests/node_modules/@types/node AI (vendored-integrity): Test-fixture node_modules dir, not a runtime payload. ai
vendored-integrity unresolved-vendored-tree:tests/node_modules/esm AI (vendored-integrity): Test-fixture node_modules dir, not a runtime payload. ai
dependencies unvetted-dep:@bobfrankston/certsupport AI (dependencies): Same-org first-party dependency by this long-tenured publisher. ai
phantom-deps phantom-dep:@bobfrankston/certsupport AI (phantom-deps): Same-org scope, expected pattern. ai
phantom-deps phantom-dep:iconv-lite AI (phantom-deps): Common encoding lib, plausibly used via require paths not scanned. ai
phantom-deps phantom-dep:help AI (phantom-deps): Small utility dep declared but used indirectly; long-tenured publisher, low risk. ai
phantom-deps phantom-dep:node AI (phantom-deps): Legacy declared dep, not a real import concern. ai
phantom-deps phantom-dep:@types/node AI (phantom-deps): Standard type-only dep, loaded by convention. ai
semgrep semgrep:silent-process-exec AI (semgrep): reloadProgram() self-restarts the current process via argv[0]/argv[1]; not a reverse shell or miner. ai
semgrep semgrep:silent-process-exec-var AI (semgrep): Same self-restart pattern; stable false positive for this package. ai
phantom-deps phantom-dep:tslib AI (phantom-deps): tslib is a known implicit TypeScript runtime dependency. ai
phantom-deps phantom-dep:@types/chalk AI (phantom-deps): Type-only package; not directly imported at runtime by convention. ai

Versions (showing 51 of 166)

View all versions
Version Deps Published
1.0.307 6 / 1
1.0.306 6 / 1
1.0.305 6 / 1
1.0.304 6 / 1
1.0.303 6 / 1
1.0.302 6 / 1
1.0.301 6 / 1
1.0.300 6 / 1
1.0.299 6 / 1
1.0.298 6 / 1
1.0.292 6 / 1
1.0.291 6 / 1
1.0.290 6 / 1
1.0.289 6 / 1
1.0.288 6 / 1
1.0.287 6 / 1
1.0.286 6 / 1
1.0.285 6 / 1
1.0.284 6 / 1
1.0.283 6 / 1
1.0.282 6 / 1
1.0.281 6 / 1
1.0.279 6 / 1
1.0.278 6 / 1
1.0.277 6 / 1
1.0.276 6 / 1
1.0.275 6 / 1
1.0.274 6 / 1
1.0.263 7 / 1
1.0.262 7 / 1
1.0.252 6 / 1
1.0.251 6 / 1
1.0.248 6 / 1
1.0.177 4 / 1
1.0.156 5 / 1
1.0.155 5 / 1
1.0.154 5 / 1
1.0.153 5 / 1
1.0.152 5 / 1
1.0.151 5 / 1
1.0.150 5 / 1
1.0.149 5 / 1
1.0.148 5 / 1
1.0.146 5 / 1
1.0.143 4 / 1
1.0.142 4 / 1
1.0.141 4 / 1
1.0.140 4 / 1
1.0.139 4 / 1
1.0.138 4 / 1
1.0.137 4 / 1

v1.0.307

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.306

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.305

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.263

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.262

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.252

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.251

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.177

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.156

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.155

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.154

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.153

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.152

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.151

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.150

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.149

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.148

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.146

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.143

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.142

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.141

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.140

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.139

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.138

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.137

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.