@convo-lang/convo-lang-api-routes
The language of AI
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@iyio/json5 | AI (phantom-deps): Referenced in config files only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:rxjs | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:ws | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:date-fns | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:node-fetch | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai |
Versions (showing 51 of 58)
| Version | Deps | Published |
|---|---|---|
| 0.9.7 | 0 / 0 | |
| 0.9.6 | 0 / 0 | |
| 0.9.5 | 0 / 0 | |
| 0.9.1 | 0 / 0 | |
| 0.8.18 | 0 / 0 | |
| 0.8.16 | 0 / 0 | |
| 0.8.15 | 0 / 0 | |
| 0.8.14 | 0 / 0 | |
| 0.8.13 | 0 / 0 | |
| 0.8.0 | 0 / 0 | |
| 0.7.50 | 7 / 0 | |
| 0.7.48 | 7 / 0 | |
| 0.7.47 | 7 / 0 | |
| 0.7.46 | 7 / 0 | |
| 0.7.45 | 7 / 0 | |
| 0.7.44 | 7 / 0 | |
| 0.7.43 | 7 / 0 | |
| 0.7.42 | 0 / 0 | |
| 0.7.41 | 7 / 0 | |
| 0.7.40 | 7 / 0 | |
| 0.7.39 | 7 / 0 | |
| 0.7.38 | 7 / 0 | |
| 0.7.37 | 7 / 0 | |
| 0.7.36 | 7 / 0 | |
| 0.7.34 | 7 / 0 | |
| 0.7.33 | 7 / 0 | |
| 0.7.32 | 7 / 0 | |
| 0.7.31 | 7 / 0 | |
| 0.7.30 | 7 / 0 | |
| 0.7.29 | 7 / 0 | |
| 0.7.28 | 7 / 0 | |
| 0.7.27 | 7 / 0 | |
| 0.7.26 | 7 / 0 | |
| 0.7.25 | 7 / 0 | |
| 0.7.24 | 7 / 0 | |
| 0.7.23 | 7 / 0 | |
| 0.7.22 | 6 / 0 | |
| 0.7.21 | 6 / 0 | |
| 0.7.20 | 6 / 0 | |
| 0.7.19 | 6 / 0 | |
| 0.7.18 | 6 / 0 | |
| 0.7.17 | 6 / 0 | |
| 0.7.16 | 6 / 0 | |
| 0.7.14 | 6 / 0 | |
| 0.7.13 | 6 / 0 | |
| 0.7.12 | 6 / 0 | |
| 0.7.11 | 7 / 0 | |
| 0.7.10 | 7 / 0 | |
| 0.7.9 | 7 / 0 | |
| 0.7.7 | 7 / 0 | |
| 0.7.6 | 7 / 0 |
v0.7.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.