@bondsports/types
backend types module for Bond-Sports
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@types/lodash | AI (phantom-deps): @types/lodash is a TS type declaration package loaded by convention, not direct import. | ai | |
| phantom-deps | phantom-dep:moment | AI (phantom-deps): moment is a runtime dep used transitively/in config; phantom-dep false positive for this package. | ai | |
| phantom-deps | phantom-dep:rimraf | AI (phantom-deps): rimraf is used in npm scripts (clean/import:types), not imported in source; stable false positive. | ai |
Versions (showing 51 of 446)
| Version | Deps | Published |
|---|---|---|
| 2.4.84 | 8 / 8 | |
| 2.4.83 | 8 / 8 | |
| 2.4.82 | 8 / 8 | |
| 2.4.81 | 8 / 8 | |
| 2.4.80 | 8 / 8 | |
| 2.4.79 | 8 / 8 | |
| 2.4.78 | 8 / 8 | |
| 2.4.77 | 8 / 8 | |
| 2.4.76 | 8 / 8 | |
| 2.4.75 | 8 / 8 | |
| 2.4.74 | 8 / 8 | |
| 2.4.73 | 8 / 8 | |
| 2.4.72 | 8 / 8 | |
| 2.4.71 | 8 / 8 | |
| 2.4.70 | 8 / 8 | |
| 2.4.69 | 8 / 8 | |
| 2.4.68 | 8 / 8 | |
| 2.4.67 | 9 / 8 | |
| 2.4.66 | 8 / 8 | |
| 2.4.65 | 8 / 8 | |
| 2.4.64 | 7 / 8 | |
| 2.4.63 | 7 / 8 | |
| 2.4.62 | 7 / 8 | |
| 2.4.61 | 7 / 8 | |
| 2.4.60 | 7 / 8 | |
| 2.4.59 | 7 / 8 | |
| 2.4.58 | 7 / 8 | |
| 2.4.57 | 7 / 8 | |
| 2.4.56 | 7 / 8 | |
| 2.4.55 | 7 / 8 | |
| 2.4.54 | 7 / 8 | |
| 2.4.53 | 7 / 8 | |
| 2.4.25 | 6 / 8 | |
| 2.4.22 | 6 / 8 | |
| 2.4.17 | 6 / 8 | |
| 2.4.16 | 6 / 8 | |
| 2.4.15 | 6 / 8 | |
| 2.4.11 | 6 / 8 | |
| 2.4.10 | 6 / 8 | |
| 2.4.9 | 6 / 8 | |
| 2.4.8 | 6 / 8 | |
| 2.4.7 | 6 / 8 | |
| 2.4.6 | 6 / 8 | |
| 2.4.5 | 6 / 8 | |
| 2.4.4 | 6 / 8 | |
| 2.4.3 | 6 / 8 | |
| 2.4.2 | 6 / 8 | |
| 2.4.1 | 6 / 8 | |
| 2.4.0 | 6 / 8 | |
| 2.3.147 | 6 / 8 | |
| 2.3.73 | 6 / 8 |
v2.4.84
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.83
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.82
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.81
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.80
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.78
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.77
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.76
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.75
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.74
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.73
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.72
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.