@cubejs-backend/cloud Apache-2.0 31 versions

@cubejs-backend/cloud

npm Repository Homepage

Cube Cloud package

31

Versions

Apache-2.0

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

cubedevincstatsbotkeydunovmaxim_cube

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
dependencies	unvetted-dep:request	AI (dependencies): request is a widely-used, legitimate (if deprecated) HTTP client, not malicious.	ai	2026/07/18
phantom-deps	phantom-dep:request	AI (phantom-deps): Used via config/transitive reference, consistent with cubejs monorepo patterns.	ai	2026/07/18
dependencies	unvetted-dep:@cubejs-backend/dotenv	AI (dependencies): Scoped sibling package within the same Cube.js org; stable internal dependency across versions.	ai	2026/05/08
bogus-package	bogus-package	AI (bogus-package): Internal monorepo package; sparse README and no keywords are expected for org-internal packages.	ai	2026/05/05
phantom-deps	phantom-dep:env-var	AI (phantom-deps): env-var is declared in dependencies; phantom-dep heuristic fires but it is a legitimate runtime dep.	ai	2026/05/05

Versions (showing 31 of 231)

Version	Deps	Published
1.2.24	8 / 7	2025-03-18
1.2.23	8 / 7	2025-03-17
1.2.22	8 / 7	2025-03-14
1.2.21	8 / 7	2025-03-11
1.2.20	8 / 7	2025-03-10
1.2.19	8 / 7	2025-03-08
1.2.18	8 / 7	2025-03-06
1.2.17	8 / 7	2025-03-05
1.2.16	8 / 7	2025-03-04
1.2.15	8 / 7	2025-03-03
1.2.14	8 / 7	2025-02-28
1.2.13	8 / 7	2025-02-26
1.2.12	8 / 7	2025-02-26
1.2.11	8 / 7	2025-02-25
1.2.10	8 / 7	2025-02-24
1.2.9	8 / 7	2025-02-21
1.2.8	8 / 7	2025-02-21
1.2.7	8 / 7	2025-02-20
1.2.6	8 / 7	2025-02-18
1.2.5	8 / 7	2025-02-13
1.2.4	8 / 7	2025-02-11
1.2.3	8 / 7	2025-02-07
1.2.2	8 / 7	2025-02-06
1.2.1	8 / 7	2025-02-06
1.2.0	8 / 7	2025-02-05
1.1.17	8 / 7	2025-01-27
1.1.16	8 / 7	2025-01-22
1.1.13	8 / 7	2025-01-09
1.1.12	8 / 7	2025-01-09
1.1.4	8 / 6	2024-11-12
1.0.8	8 / 6	2025-02-08

v1.2.24

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.23

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.22

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.21

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.20

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.19

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.18

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.17

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.16

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.15

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.14

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.13

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.12

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.10

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.17

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.16

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.13

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.12

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.