← Home

@bubblelab/bubble-core

npm Repository Homepage
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

zhubzy

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:chart.js AI (phantom-deps): chart.js is a peer/config dep for chartjs-node-canvas; not directly imported but legitimately declared. ai
phantom-deps phantom-dep:zod-to-json-schema AI (phantom-deps): Schema utility likely used indirectly via LangChain integrations. ai
phantom-deps phantom-dep:@types/pg AI (phantom-deps): TypeScript type package loaded by convention; stable pattern for this package. ai
phantom-deps phantom-dep:@langchain/community AI (phantom-deps): Config-file reference; stable pattern for this package. ai

Versions (showing 51 of 297)

View all versions
Version Deps Published
0.1.324 20 / 6
0.1.323 20 / 6
0.1.322 20 / 6
0.1.321 20 / 6
0.1.320 20 / 6
0.1.319 20 / 6
0.1.318 20 / 6
0.1.317 20 / 6
0.1.316 20 / 6
0.1.314 20 / 6
0.1.313 20 / 6
0.1.312 20 / 6
0.1.311 20 / 6
0.1.310 20 / 6
0.1.309 20 / 6
0.1.308 20 / 6
0.1.307 20 / 6
0.1.306 20 / 6
0.1.305 20 / 6
0.1.304 20 / 6
0.1.303 20 / 6
0.1.302 20 / 6
0.1.301 20 / 6
0.1.300 20 / 6
0.1.299 20 / 6
0.1.298 20 / 6
0.1.297 20 / 6
0.1.296 20 / 6
0.1.295 20 / 6
0.1.294 20 / 6
0.1.293 20 / 6
0.1.292 20 / 6
0.1.291 20 / 6
0.1.289 20 / 6
0.1.288 20 / 6
0.1.287 20 / 6
0.1.286 20 / 6
0.1.285 20 / 6
0.1.284 20 / 6
0.1.283 20 / 6
0.1.282 20 / 6
0.1.281 20 / 6
0.1.280 20 / 6
0.1.279 20 / 6
0.1.278 20 / 6
0.1.277 20 / 6
0.1.276 20 / 6
0.1.275 20 / 6
0.1.273 20 / 6
0.1.272 20 / 6
0.1.271 20 / 6