@dpuse/dpuse-connector-dropbox
[](./LICENSE) <span><!-- OWASP_BADGES_START --> [](https://dpuse.github.io/dpuse-connector-dropbox/dependency-check-reports/depende
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@dpuse/dpuse-tool-csv-parse | AI (phantom-deps): Same-org dependency; likely used transitively or bundled — stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@dpuse/dpuse-tool-file-operators | AI (phantom-deps): Same-org dependency; likely used transitively or bundled — stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:p-queue | AI (phantom-deps): Referenced in config files per finding; stable false positive for this package. | ai |
Versions (showing 22 of 22)
| Version | Deps | Published |
|---|---|---|
| 0.2.497 | 4 / 27 | |
| 0.2.496 | 4 / 27 | |
| 0.2.495 | 4 / 27 | |
| 0.2.494 | 4 / 27 | |
| 0.2.493 | 4 / 27 | |
| 0.2.492 | 4 / 26 | |
| 0.2.491 | 4 / 26 | |
| 0.2.490 | 4 / 26 | |
| 0.2.489 | 4 / 26 | |
| 0.2.488 | 4 / 26 | |
| 0.2.487 | 4 / 26 | |
| 0.2.486 | 4 / 26 | |
| 0.2.485 | 4 / 26 | |
| 0.2.484 | 4 / 26 | |
| 0.2.483 | 4 / 26 | |
| 0.2.482 | 4 / 26 | |
| 0.2.481 | 4 / 26 | |
| 0.2.480 | 4 / 26 | |
| 0.2.479 | 4 / 26 | |
| 0.2.477 | 4 / 26 | |
| 0.2.476 | 4 / 26 | |
| 0.2.474 | 4 / 26 |
v0.2.484
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.480
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.