@cloudcome/utils-uni
cloudcome utils for uni-app
16
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
cloudcome
Keywords
cloudcomeutilsutils-browserutils-coreutils-nodeutils-reactutils-uniutils-vue
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | dormant-publish | AI (publish-pattern): SLSA provenance attestation confirms legitimate CI/CD publish from the known repo; dormancy alone is not a risk here. | ai | |
| dependencies | unvetted-dep:@dcloudio/uni-app | AI (dependencies): @dcloudio/uni-app is the canonical uni-app framework; its use is expected and stable for this package. | ai | |
| phantom-deps | phantom-dep:@dcloudio/types | AI (phantom-deps): Type-only dep for uni-app; declared for TS types, not directly imported at runtime — stable false positive for this package. | ai |