@bondsports/types
backend types module for Bond-Sports
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@types/lodash | AI (phantom-deps): @types/lodash is a TS type declaration package loaded by convention, not direct import. | ai | |
| phantom-deps | phantom-dep:moment | AI (phantom-deps): moment is a runtime dep used transitively/in config; phantom-dep false positive for this package. | ai | |
| phantom-deps | phantom-dep:rimraf | AI (phantom-deps): rimraf is used in npm scripts (clean/import:types), not imported in source; stable false positive. | ai |
Versions (showing 100 of 446)
| Version | Deps | Published |
|---|---|---|
| 2.4.84 | 8 / 8 | |
| 2.4.83 | 8 / 8 | |
| 2.4.82 | 8 / 8 | |
| 2.4.81 | 8 / 8 | |
| 2.4.80 | 8 / 8 | |
| 2.4.79 | 8 / 8 | |
| 2.4.78 | 8 / 8 | |
| 2.4.77 | 8 / 8 | |
| 2.4.76 | 8 / 8 | |
| 2.4.75 | 8 / 8 | |
| 2.4.74 | 8 / 8 | |
| 2.4.73 | 8 / 8 | |
| 2.4.72 | 8 / 8 | |
| 2.4.71 | 8 / 8 | |
| 2.4.70 | 8 / 8 | |
| 2.4.69 | 8 / 8 | |
| 2.4.68 | 8 / 8 | |
| 2.4.67 | 9 / 8 | |
| 2.4.66 | 8 / 8 | |
| 2.4.65 | 8 / 8 | |
| 2.4.64 | 7 / 8 | |
| 2.4.63 | 7 / 8 | |
| 2.4.62 | 7 / 8 | |
| 2.4.61 | 7 / 8 | |
| 2.4.60 | 7 / 8 | |
| 2.4.59 | 7 / 8 | |
| 2.4.58 | 7 / 8 | |
| 2.4.57 | 7 / 8 | |
| 2.4.56 | 7 / 8 | |
| 2.4.55 | 7 / 8 | |
| 2.4.54 | 7 / 8 | |
| 2.4.53 | 7 / 8 | |
| 2.4.25 | 6 / 8 | |
| 2.4.22 | 6 / 8 | |
| 2.4.17 | 6 / 8 | |
| 2.4.16 | 6 / 8 | |
| 2.4.15 | 6 / 8 | |
| 2.4.11 | 6 / 8 | |
| 2.4.10 | 6 / 8 | |
| 2.4.9 | 6 / 8 | |
| 2.4.8 | 6 / 8 | |
| 2.4.7 | 6 / 8 | |
| 2.4.6 | 6 / 8 | |
| 2.4.5 | 6 / 8 | |
| 2.4.4 | 6 / 8 | |
| 2.4.3 | 6 / 8 | |
| 2.4.2 | 6 / 8 | |
| 2.4.1 | 6 / 8 | |
| 2.4.0 | 6 / 8 | |
| 2.3.147 | 6 / 8 | |
| 2.3.73 | 6 / 8 | |
| 2.3.72 | 6 / 8 | |
| 2.3.71 | 6 / 8 | |
| 2.3.70 | 6 / 8 | |
| 2.3.69 | 6 / 8 | |
| 2.3.68 | 6 / 8 | |
| 2.3.67 | 6 / 8 | |
| 2.3.66 | 6 / 8 | |
| 2.3.65 | 6 / 8 | |
| 2.3.64 | 6 / 8 | |
| 2.3.63 | 6 / 8 | |
| 2.3.62 | 6 / 8 | |
| 2.3.61 | 6 / 8 | |
| 2.3.60 | 6 / 8 | |
| 2.3.59 | 6 / 8 | |
| 2.3.58 | 6 / 8 | |
| 2.3.57 | 6 / 8 | |
| 2.3.56 | 6 / 8 | |
| 2.3.55 | 6 / 8 | |
| 2.3.54 | 6 / 8 | |
| 2.3.53 | 6 / 8 | |
| 2.3.52 | 6 / 8 | |
| 2.3.51 | 6 / 8 | |
| 2.3.49 | 6 / 8 | |
| 2.3.48 | 6 / 8 | |
| 2.3.47 | 6 / 8 | |
| 2.3.46 | 6 / 8 | |
| 2.3.45 | 6 / 8 | |
| 2.3.44 | 6 / 8 | |
| 2.3.43 | 6 / 8 | |
| 2.3.42 | 6 / 8 | |
| 2.3.39 | 6 / 8 | |
| 2.3.38 | 6 / 8 | |
| 2.3.37 | 6 / 8 | |
| 2.3.36 | 6 / 8 | |
| 2.3.34 | 6 / 8 | |
| 2.3.33 | 6 / 8 | |
| 2.3.32 | 6 / 8 | |
| 2.3.28 | 6 / 8 | |
| 2.3.27 | 6 / 8 | |
| 2.3.21 | 6 / 8 | |
| 2.3.19 | 6 / 8 | |
| 2.3.14 | 6 / 8 | |
| 2.3.13 | 6 / 8 | |
| 2.3.12 | 6 / 8 | |
| 2.3.9 | 6 / 8 | |
| 2.3.7 | 6 / 8 | |
| 2.3.5 | 6 / 8 | |
| 2.3.4 | 6 / 8 | |
| 2.3.3 | 6 / 8 |
v2.4.84
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.83
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.82
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.81
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.80
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.78
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.77
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.76
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.75
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.74
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.73
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.4.72
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.3.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.3.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.