@finos/legend-application-data-cube
Legend DataCube application core
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:serializr | AI (dependencies): Well-known serialization library; stable dependency of Legend ecosystem. | ai | |
| dependencies | unvetted-dep:@finos/legend-art | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:react-oidc-context | AI (dependencies): Established OIDC React library; no known advisories. | ai | |
| dependencies | unvetted-dep:@duckdb/duckdb-wasm | AI (dependencies): Official DuckDB WASM package from the DuckDB org. | ai | |
| dependencies | unvetted-dep:@finos/legend-graph | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-shared | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-storage | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-data-cube | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-application | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-code-editor | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-server-depot | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-query-builder | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-server-lakehouse | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Type-only package loaded by convention in React projects; stable false positive. | ai | |
| phantom-deps | phantom-dep:@types/react-dom | AI (phantom-deps): Type-only package loaded by convention in React projects; stable false positive. | ai |
Versions (showing 51 of 215)
| Version | Deps | Published |
|---|---|---|
| 0.7.91 | 21 / 11 | |
| 0.7.90 | 21 / 11 | |
| 0.7.89 | 21 / 11 | |
| 0.7.88 | 21 / 11 | |
| 0.7.87 | 21 / 11 | |
| 0.7.86 | 21 / 11 | |
| 0.7.85 | 21 / 11 | |
| 0.7.84 | 21 / 11 | |
| 0.7.83 | 21 / 11 | |
| 0.7.82 | 21 / 11 | |
| 0.7.81 | 21 / 11 | |
| 0.7.80 | 21 / 11 | |
| 0.7.79 | 21 / 11 | |
| 0.7.78 | 21 / 11 | |
| 0.7.77 | 21 / 11 | |
| 0.7.76 | 21 / 11 | |
| 0.7.75 | 21 / 11 | |
| 0.7.74 | 21 / 11 | |
| 0.7.73 | 21 / 11 | |
| 0.7.72 | 21 / 11 | |
| 0.7.71 | 21 / 11 | |
| 0.7.70 | 21 / 11 | |
| 0.7.69 | 21 / 11 | |
| 0.7.68 | 21 / 11 | |
| 0.7.67 | 21 / 11 | |
| 0.7.66 | 21 / 11 | |
| 0.7.65 | 21 / 11 | |
| 0.7.64 | 21 / 11 | |
| 0.7.63 | 21 / 11 | |
| 0.7.62 | 21 / 11 | |
| 0.7.61 | 21 / 11 | |
| 0.7.60 | 21 / 11 | |
| 0.7.59 | 21 / 11 | |
| 0.7.58 | 21 / 11 | |
| 0.7.57 | 21 / 11 | |
| 0.7.56 | 21 / 11 | |
| 0.7.55 | 21 / 11 | |
| 0.7.54 | 21 / 11 | |
| 0.7.53 | 21 / 11 | |
| 0.7.52 | 21 / 11 | |
| 0.7.51 | 21 / 11 | |
| 0.7.50 | 21 / 11 | |
| 0.7.49 | 21 / 11 | |
| 0.7.48 | 21 / 11 | |
| 0.7.47 | 21 / 11 | |
| 0.7.46 | 21 / 11 | |
| 0.7.45 | 21 / 11 | |
| 0.7.44 | 21 / 11 | |
| 0.7.42 | 21 / 11 | |
| 0.7.41 | 21 / 11 | |
| 0.7.40 | 21 / 11 |
v0.7.91
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.90
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.89
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.88
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.87
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.86
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.85
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.84
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.83
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.63
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.62
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.61
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.59
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.51
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.46
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.45
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.