← Home

@doist/todoist-api-typescript

Deprecated: renamed to @doist/todoist-sdk

38
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

ricardoisthenningmujvalenteantondoistjefcurtisdoistbotfbiduscottatdoisternestodoist

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed to GitHub Actions as part of CI/CD migration; SLSA provenance attestation confirms integrity. ai
maintainer-change maintainer-added AI (maintainer-change): scottatdoist matches Doist org naming pattern; consistent with legitimate team expansion. ai
publish-pattern new-deps-added AI (publish-pattern): undici is a well-known Node.js HTTP client maintained by the Node.js core team; low risk. ai
source-diff large-new-source-files AI (source-diff): Large file count increase consistent with major version bump and expanded dual CJS/ESM dist output. ai
bogus-package bogus-package AI (bogus-package): Intentional deprecation shim; tiny payload and missing metadata are expected for a redirect stub. ai

Versions (showing 38 of 38)

Version Deps Published
7.10.0 1 / 0
7.9.1 7 / 19
7.9.0 7 / 19
7.8.0 7 / 19
7.7.0 7 / 14
7.6.1 7 / 14
7.6.0 7 / 14
7.5.0 7 / 14
7.4.0 7 / 14
7.3.0 7 / 21
7.2.0 7 / 23
7.1.1 7 / 23
7.1.0 7 / 23
7.0.0 7 / 23
6.10.0 7 / 22
6.9.0 7 / 22
6.8.1 7 / 22
6.8.0 7 / 22
6.7.0 7 / 22
6.6.0 7 / 22
6.5.1 7 / 22
6.5.0 7 / 22
6.4.1 7 / 22
6.4.0 7 / 22
6.3.0 7 / 22
6.2.1 7 / 22
6.2.0 7 / 22
6.1.12 7 / 22
6.1.11 7 / 22
6.1.10 6 / 22
6.1.9 6 / 22
6.1.8 6 / 22
6.1.7 6 / 22
6.1.6 6 / 22
6.1.5 6 / 22
6.1.4 6 / 22
6.0.1 6 / 21
6.0.0 6 / 21