@contentstack/cli
Command-line tool (CLI) to interact with Contentstack
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
mynkcloudaccounts
Keywords
contentstackcliplugin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:contentstack-cli-tsgen | AI (dependencies): Registered as an oclif plugin; consistent with package's plugin architecture. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New dep is a declared oclif plugin, not a hidden/unrelated dependency. | ai | |
| phantom-deps | phantom-dep:contentstack-cli-tsgen | AI (phantom-deps): Used via oclif plugin config, not direct import; standard for this CLI's plugins. | ai | |
| phantom-deps | phantom-dep:debug | AI (phantom-deps): oclif CLI; deps declared in oclif config, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:winston | AI (phantom-deps): oclif CLI; deps declared in oclif config, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:open | AI (phantom-deps): oclif CLI; deps declared in oclif config, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-audit | AI (phantom-deps): First-party plugin declared in oclif config; not directly imported by design. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-export-to-csv | AI (phantom-deps): First-party plugin declared in oclif config; not directly imported by design. | ai | |
| phantom-deps | phantom-dep:inquirer | AI (phantom-deps): oclif CLI; deps declared in oclif config, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): oclif CLI; deps declared in oclif config, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): oclif CLI; deps declared in oclif config, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-variants | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-export | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-import | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-migration | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped @contentstack/cli is the official Contentstack CLI; no relation to joi. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-bootstrap | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-migrate-rte | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-bulk-publish | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-import-setup | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-branches | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@oclif/plugin-help | AI (phantom-deps): oclif plugins declared in oclif config, not directly imported — expected pattern. | ai | |
| phantom-deps | phantom-dep:@oclif/plugin-plugins | AI (phantom-deps): oclif plugins declared in oclif config, not directly imported — expected pattern. | ai | |
| phantom-deps | phantom-dep:@oclif/plugin-not-found | AI (phantom-deps): oclif plugins declared in oclif config, not directly imported — expected pattern. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-auth | AI (phantom-deps): Same-org oclif plugin loaded via config, not direct import — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-config | AI (phantom-deps): Same-org oclif plugin loaded via config, not direct import — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-launch | AI (phantom-deps): Same-org oclif plugin loaded via config, not direct import — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/management | AI (phantom-deps): Same-org dep used transitively; stable false positive for this umbrella CLI. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-seed | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-command | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai | |
| phantom-deps | phantom-dep:@contentstack/cli-cm-clone | AI (phantom-deps): Same-org oclif plugin loaded via config — stable false positive. | ai |
Versions (showing 51 of 87)
| Version | Deps | Published |
|---|---|---|
| 1.65.0 | 25 / 22 | |
| 1.64.0 | 25 / 22 | |
| 1.63.1 | 25 / 22 | |
| 1.63.0 | 25 / 22 | |
| 1.62.1 | 25 / 22 | |
| 1.62.0 | 25 / 22 | |
| 1.61.1 | 25 / 22 | |
| 1.61.0 | 33 / 24 | |
| 1.60.1 | 33 / 24 | |
| 1.60.0 | 33 / 24 | |
| 1.59.0 | 33 / 24 | |
| 1.58.1 | 33 / 24 | |
| 1.58.0 | 33 / 24 | |
| 1.57.0 | 33 / 24 | |
| 1.56.0 | 33 / 24 | |
| 1.55.1 | 33 / 24 | |
| 1.55.0 | 33 / 24 | |
| 1.54.0 | 33 / 24 | |
| 1.53.1 | 33 / 24 | |
| 1.53.0 | 33 / 24 | |
| 1.52.0 | 33 / 24 | |
| 1.51.1 | 33 / 24 | |
| 1.51.0 | 33 / 24 | |
| 1.50.0 | 33 / 24 | |
| 1.49.0 | 33 / 24 | |
| 1.48.1 | 33 / 24 | |
| 1.48.0 | 33 / 24 | |
| 1.47.0 | 33 / 24 | |
| 1.46.1 | 33 / 24 | |
| 1.46.0 | 33 / 24 | |
| 1.45.1 | 33 / 24 | |
| 1.45.0 | 33 / 24 | |
| 1.44.2 | 33 / 24 | |
| 1.44.1 | 33 / 24 | |
| 1.44.0 | 33 / 24 | |
| 1.43.1 | 33 / 24 | |
| 1.43.0 | 33 / 24 | |
| 1.42.0 | 33 / 24 | |
| 1.41.2 | 33 / 24 | |
| 1.41.1 | 33 / 24 | |
| 1.41.0 | 33 / 24 | |
| 1.40.5 | 33 / 24 | |
| 1.40.4 | 33 / 24 | |
| 1.40.3 | 33 / 24 | |
| 1.40.2 | 33 / 24 | |
| 1.40.1 | 33 / 24 | |
| 1.40.0 | 33 / 24 | |
| 1.39.0 | 33 / 24 | |
| 1.38.0 | 33 / 24 | |
| 1.37.0 | 33 / 24 | |
| 1.36.0 | 34 / 24 |
v1.65.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.63.1
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.40.1
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.40.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.39.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.38.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.37.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.36.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.