@c8y/devkit
Cumulocity Webpack Build Facade
21
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
c8y
Keywords
CumulocityIoTm2mdevkittools
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:zip-dir | AI (dependencies): Legitimate build utility for this webpack facade; stable across versions. | ai | |
| dependencies | unvetted-dep:JSONPath | AI (dependencies): Standard JSON querying library used in build tooling; no risk signal. | ai | |
| dependencies | unvetted-dep:babel-plugin-angularjs-annotate | AI (dependencies): Known Babel plugin for AngularJS DI annotation; consistent with this package's purpose. | ai | |
| provenance | no-provenance | AI (provenance): Published via GitHub Actions CI; provenance attestation absence is common for this ecosystem. | ai | |
| phantom-deps | phantom-dep:@babel/plugin-proposal-optional-chaining | AI (phantom-deps): Framework-scoped babel plugin; loaded by convention. | ai | |
| phantom-deps | phantom-dep:file-loader | AI (phantom-deps): Webpack loader referenced in config files, not direct import — expected pattern. | ai | |
| phantom-deps | phantom-dep:html-loader | AI (phantom-deps): Webpack loader referenced in config files, not direct import — expected pattern. | ai | |
| phantom-deps | phantom-dep:babel-eslint | AI (phantom-deps): Referenced in config files; stable false positive for this build facade. | ai | |
| phantom-deps | phantom-dep:babel-loader | AI (phantom-deps): Webpack loader referenced in config files, not direct import — expected pattern. | ai | |
| phantom-deps | phantom-dep:style-loader | AI (phantom-deps): Webpack loader referenced in config files, not direct import — expected pattern. | ai | |
| phantom-deps | phantom-dep:@babel/parser | AI (phantom-deps): Framework-scoped babel tooling loaded by convention in build facade. | ai | |
| phantom-deps | phantom-dep:imports-loader | AI (phantom-deps): Webpack loader referenced in config files, not direct import — expected pattern. | ai | |
| npm-metadata | url-dep:angular-gettext-tools | AI (npm-metadata): Git URL is pinned to a specific commit SHA, not a mutable branch; risk is low and stable across versions. | ai | |
| phantom-deps | phantom-dep:@babel/preset-env | AI (phantom-deps): Framework-scoped babel tooling loaded by convention in build facade. | ai | |
| phantom-deps | phantom-dep:@babel/eslint-parser | AI (phantom-deps): Framework-scoped babel tooling loaded by convention in build facade. | ai | |
| phantom-deps | phantom-dep:webpack-dev-middleware | AI (phantom-deps): Referenced in config files; stable false positive for this build facade. | ai | |
| phantom-deps | phantom-dep:webpack-hot-middleware | AI (phantom-deps): Referenced in config files; stable false positive for this build facade. | ai | |
| phantom-deps | phantom-dep:@babel/helper-plugin-utils | AI (phantom-deps): Framework-scoped babel tooling loaded by convention in build facade. | ai | |
| phantom-deps | phantom-dep:babel-plugin-angularjs-annotate | AI (phantom-deps): Referenced in config files; stable false positive for this build facade. | ai | |
| phantom-deps | phantom-dep:@babel/plugin-syntax-dynamic-import | AI (phantom-deps): Framework-scoped babel tooling loaded by convention in build facade. | ai | |
| phantom-deps | phantom-dep:postcss-loader | AI (phantom-deps): Webpack loader referenced in config files, not direct import — expected pattern. | ai | |
| phantom-deps | phantom-dep:commander | AI (phantom-deps): Build facade; webpack/babel tools loaded by convention, not direct import. | ai | |
| phantom-deps | phantom-dep:@babel/cli | AI (phantom-deps): Framework-scoped babel tooling loaded by convention in build facade. | ai | |
| phantom-deps | phantom-dep:css-loader | AI (phantom-deps): Webpack loader referenced in config files, not direct import — expected pattern. | ai | |
| phantom-deps | phantom-dep:@babel/core | AI (phantom-deps): Framework-scoped babel tooling loaded by convention in build facade. | ai |
Versions (showing 21 of 222)
| Version | Deps | Published |
|---|---|---|
| 1021.22.150 | 47 / 6 | |
| 1021.22.149 | 47 / 6 | |
| 1021.22.146 | 47 / 6 | |
| 1021.22.145 | 47 / 6 | |
| 1021.22.144 | 47 / 6 | |
| 1021.22.141 | 47 / 6 | |
| 1021.22.140 | 47 / 6 | |
| 1021.22.139 | 47 / 6 | |
| 1021.22.138 | 47 / 6 | |
| 1021.22.137 | 47 / 6 | |
| 1021.22.136 | 47 / 6 | |
| 1021.22.135 | 47 / 6 | |
| 1021.22.134 | 47 / 6 | |
| 1021.22.133 | 47 / 6 | |
| 1021.22.131 | 47 / 6 | |
| 1021.22.130 | 47 / 6 | |
| 1021.22.129 | 47 / 6 | |
| 1021.22.128 | 47 / 6 | |
| 1021.22.127 | 47 / 6 | |
| 1021.22.126 | 47 / 6 | |
| 1021.22.124 | 47 / 6 |