@cdktn/cli-core
CDK Terrain CLI Core, meant for internal use only
7
Versions
MPL-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
cdktn-teamjsteinichso0k
Keywords
cdkcdktfcdktnterraform
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:env-spread | AI (semgrep): CLI tool passes process.env to subprocess (pipenv) with one override — standard pattern for build orchestration. | ai | |
| semgrep | semgrep:env-bulk-read | AI (semgrep): Filters process.env to exclude TF_VAR_ keys before passing to synth — intentional and documented behavior. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Loads cdktf.json config file via require(path) — standard config-loading pattern for CLI tools. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): CLI/build tool; child_process use in scaffold hooks is expected and benign. | ai | |
| phantom-deps | phantom-dep:execa | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:yargs | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:log4js | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:cross-fetch | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:detect-port | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:extract-zip | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:ink-spinner | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:jsii-pacmak | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:ink | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:jsii-rosetta | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:tunnel-agent | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:lodash.isequal | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:stream-buffers | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:@cdktn/hcl2json | AI (phantom-deps): Same-org dep used in templates/config; stable FP for this package. | ai | |
| phantom-deps | phantom-dep:parse-gitignore | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:follow-redirects | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:cli-spinners | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:jsii | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:open | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): CLI tool; deps referenced in config/template files, not direct imports — stable FP for this package. | ai |