@bpmn-io/feel-editor
Editor for FEEL expressions.
10
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
bpmn-io-adminnikkubarmacphilippfrommemaxtruskaiir-camundavsgoulartbarinalijarekdanielakev-camundaalekseymanetov
Keywords
bpmn-iofeeleditor
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-removed | AI (maintainer-change): Publisher barmac is a known maintainer; removal of simon-steinruecken-camunda is an org restructuring, not a takeover. | ai | |
| bogus-package | bogus-package | AI (bogus-package): barinali is a listed maintainer in the bpmn-io org; the actual publisher barmac has a clean track record. | ai | |
| provenance | publisher-changed | AI (provenance): barmac is a known trusted publisher in the bpmn-io org with strong track record; transition appears legitimate. | ai | |
| dependencies | unvetted-dep:min-dom | AI (dependencies): min-dom is a well-known bpmn-io utility; stable dep for this package. | ai | |
| dependencies | unvetted-dep:@camunda/feel-builtins | AI (dependencies): First-party Camunda dep; consistent with this package's scope. | ai | |
| dependencies | unvetted-dep:@bpmn-io/feel-lint | AI (dependencies): First-party bpmn-io dep; consistent with this package's scope. | ai | |
| dependencies | unvetted-dep:@bpmn-io/lang-feel | AI (dependencies): First-party bpmn-io dep; consistent with this package's scope. | ai |