@checkstack/maintenance-backend
23
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
enyineer
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@checkstack/status-page-common | AI (dependencies): Same @checkstack org scope as all other deps; consistent internal monorepo pattern. | ai | |
| dependencies | unvetted-dep:@checkstack/status-page-backend | AI (dependencies): Same @checkstack org scope as all other deps; consistent internal monorepo pattern. | ai | |
| dependencies | unvetted-dep:@checkstack/ai-backend | AI (dependencies): Same-org @checkstack/* package; consistent with monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@checkstack/ai-common | AI (dependencies): Same-org @checkstack/* package; consistent with monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@checkstack/automation-common | AI (dependencies): Same-org @checkstack/* package; consistent with monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@checkstack/automation-backend | AI (dependencies): Same-org @checkstack/* package; consistent with monorepo pattern across all versions. | ai | |
| phantom-deps | phantom-dep:@orpc/contract | AI (phantom-deps): Referenced in config/contract files rather than direct imports; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@checkstack/automation-common | AI (phantom-deps): Same-org package used indirectly; stable false positive for this monorepo-style package. | ai | |
| phantom-deps | phantom-dep:@checkstack/catalog-backend | AI (phantom-deps): Same-org internal dep; phantom detection unreliable for monorepo packages. | ai | |
| provenance | no-provenance | AI (provenance): No provenance across all @checkstack/* packages; consistent internal publishing pattern. | ai | |
| phantom-deps | phantom-dep:@checkstack/integration-common | AI (phantom-deps): Same-org workspace dep; phantom-dep heuristic unreliable for monorepo packages. | ai | |
| phantom-deps | phantom-dep:@checkstack/notification-common | AI (phantom-deps): Same-org workspace dep; phantom-dep heuristic unreliable for monorepo packages. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Internal monorepo package; no description is normal for workspace-only packages. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Internal monorepo workspace package; missing metadata is expected, not a spam/malware indicator. | ai |
Versions (showing 23 of 23)
| Version | Deps | Published |
|---|---|---|
| 1.7.3 | 21 / 7 | |
| 1.5.3 | 19 / 7 | |
| 1.4.1 | 19 / 7 | |
| 1.4.0 | 19 / 7 | |
| 1.3.0 | 16 / 7 | |
| 1.1.6 | 16 / 7 | |
| 1.1.4 | 16 / 7 | |
| 1.0.2 | 16 / 7 | |
| 0.7.1 | 15 / 6 | |
| 0.6.0 | 13 / 6 | |
| 0.5.14 | 13 / 6 | |
| 0.5.13 | 13 / 6 | |
| 0.5.12 | 13 / 6 | |
| 0.5.9 | 13 / 6 | |
| 0.5.5 | 12 / 8 | |
| 0.5.4 | 12 / 8 | |
| 0.5.2 | 11 / 8 | |
| 0.5.1 | 11 / 8 | |
| 0.2.5 | 11 / 8 | |
| 0.2.4 | 11 / 8 | |
| 0.1.0 | 11 / 8 | |
| 0.0.3 | 11 / 8 | |
| 0.0.2 | 11 / 8 |