@ekairos/dataset
Pulzar Dataset Tools
13
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
avigano
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@ekairos/reactor | AI (dependencies): First-party monorepo sibling package, pinned to same version. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New dep is a first-party sibling package from the same monorepo. | ai | |
| dependencies | unvetted-dep:@ekairos/events | AI (dependencies): Same-org monorepo sibling dependency, pinned to matching version. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): Monorepo with 180 versions; rapid simultaneous publishes are expected for coordinated version bumps. | ai | |
| semgrep | semgrep:toplevel-fetch | AI (semgrep): Fetch is in a dataset-download skill script that fetches a caller-supplied URL; expected behavior for this package. | ai | |
| source-diff | obfuscated-file:dist/file/scripts.generated.js | AI (source-diff): File is a generated module of base64-encoded Python scripts with a header comment explaining its origin; not obfuscation. | ai | |
| provenance | no-provenance | AI (provenance): Monorepo package with no history of provenance; consistent across all versions. | ai | |
| dependencies | unvetted-dep:@ekairos/thread | AI (dependencies): Internal monorepo sibling package; consistent with the @ekairos org pattern across all versions. | ai | |
| dependencies | unvetted-dep:@ekairos/sandbox | AI (dependencies): Internal monorepo sibling package; consistent with the @ekairos org pattern across all versions. | ai |