@datagrok/sequence-translator
SequenceTranslator translates [oligonucleotide](https://en.wikipedia.org/wiki/Oligonucleotide) sequences between [different representations](https://github.com/datagrok-ai/public/tree/master/packages/SequenceTranslator#sequence-representations).
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:save-svg-as-png | AI (dependencies): save-svg-as-png is a well-known SVG export utility; stable use in this bioinformatics plugin across many versions. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Legitimate Datagrok platform plugin; sparse README/keywords are typical for internal tooling packages. | ai | |
| phantom-deps | phantom-dep:typescript | AI (phantom-deps): Build-time compiler; not imported at runtime, stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:openchemlib | AI (phantom-deps): Chemistry library used via config/indirect reference; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Type-only package loaded by convention; not directly imported at runtime. | ai | |
| phantom-deps | phantom-dep:typeahead-standalone | AI (phantom-deps): UI library referenced via config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@datagrok-libraries/tutorials | AI (phantom-deps): Datagrok internal library; referenced indirectly, stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:ts-loader | AI (phantom-deps): Build-time webpack loader; not imported at runtime, stable pattern for this package. | ai |
Versions (showing 9 of 9)
| Version | Deps | Published |
|---|---|---|
| 1.10.23 | 16 / 24 | |
| 1.10.22 | 16 / 24 | |
| 1.10.19 | 16 / 24 | |
| 1.10.18 | 16 / 24 | |
| 1.10.17 | 16 / 24 | |
| 1.10.16 | 16 / 24 | |
| 1.10.15 | 16 / 24 | |
| 1.10.14 | 16 / 24 | |
| 1.10.13 | 16 / 24 |
v1.10.23
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.22
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.19
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.10.15
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.10.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.10.13
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.