@dxos/sql-sqlite
Sqlite client
2
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
richburdonmarik_dwittjosiahdxos-botmykola-vrmchk
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publisher with SLSA provenance; consistent with org-wide CI/CD adoption. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Major version jump from 0.0.0 to 0.9.0; size increase reflects legitimate feature expansion. | ai | |
| source-diff | large-new-source-files | AI (source-diff): 70 new files consistent with major version expansion of SQLite client with multi-platform support. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): 0.0.0 is a standard monorepo placeholder version for @dxos packages; 51 versions published under this pattern. | ai | |
| phantom-deps | phantom-dep:@effect/experimental | AI (phantom-deps): Referenced in config files per finding; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@dxos/wa-sqlite | AI (phantom-deps): Same-org dep used via platform-specific conditional exports; not a direct import but legitimately declared. | ai | |
| phantom-deps | phantom-dep:@effect/platform | AI (phantom-deps): Referenced in config files per finding; stable false positive for this package. | ai |