@fast-csv/parse
fast-csv parsing package
5
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
damartinzackerydevjuan-c2fodustinsmith1024
Keywords
csvparsefast-csvparser
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:lodash.isnil | AI (dependencies): lodash.isnil is a stable, well-known lodash utility sub-package with a long npm history; unvetted status is a registry artifact, not a security concern for this package. | ai | |
| dependencies | unvetted-dep:lodash.groupby | AI (dependencies): lodash.groupby is a stable, well-known lodash utility sub-package; unvetted status is a registry artifact, not a security concern for this package. | ai | |
| dependencies | unvetted-dep:lodash.isfunction | AI (dependencies): lodash.isfunction is a stable, well-known lodash utility sub-package; unvetted status is a registry artifact, not a security concern for this package. | ai | |
| dependencies | unvetted-dep:lodash.escaperegexp | AI (dependencies): lodash.escaperegexp is a stable, well-known lodash utility sub-package; unvetted status is a registry artifact, not a security concern for this package. | ai | |
| typosquat | typosquat.levenshtein:parcel | AI (typosquat): @fast-csv/parse is the official C2FO fast-csv CSV parsing package with 6+ years of history; similarity to 'parcel' is coincidental and not a typosquat. | ai |