@casual-simulation/aux-records
Helpers and managers used by the CasualOS records system.
8
Versions
AGPL-3.0-only
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
kallyngowdyyeticasualsimulation
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): @google/genai is Google's official replacement for @google/generative-ai; straightforward SDK rename, not a suspicious new dep. | ai | |
| dependencies | unvetted-dep:@casual-simulation/crypto | AI (dependencies): Same-org dependency from Casual Simulation; consistent with package's ecosystem. | ai | |
| provenance | missing-githead | AI (provenance): Package has SLSA provenance attestation which supersedes gitHead as a supply chain integrity signal. | ai | |
| dependencies | unvetted-dep:@casual-simulation/timesync | AI (dependencies): Same-org dependency from Casual Simulation; consistent with package's ecosystem. | ai | |
| dependencies | unvetted-dep:@casual-simulation/rate-limit-redis | AI (dependencies): Same-org dependency from Casual Simulation; consistent with package's ecosystem. | ai | |
| dependencies | unvetted-dep:@casual-simulation/fast-json-stable-stringify | AI (dependencies): Same-org dependency from Casual Simulation; consistent with package's ecosystem. | ai | |
| phantom-deps | phantom-dep:@opentelemetry/resources | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@casual-simulation/timesync | AI (phantom-deps): Same-org scoped package; indirect usage pattern is stable for this monorepo. | ai | |
| phantom-deps | phantom-dep:preact-render-to-string | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Standard Proxy trap pattern using Reflect.get(); not obfuscation. Stable for this package. | ai |