@finos/legend-application-data-cube
Legend DataCube application core
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:serializr | AI (dependencies): Well-known serialization library; stable dependency of Legend ecosystem. | ai | |
| dependencies | unvetted-dep:@finos/legend-art | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:react-oidc-context | AI (dependencies): Established OIDC React library; no known advisories. | ai | |
| dependencies | unvetted-dep:@duckdb/duckdb-wasm | AI (dependencies): Official DuckDB WASM package from the DuckDB org. | ai | |
| dependencies | unvetted-dep:@finos/legend-graph | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-shared | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-storage | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-data-cube | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-application | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-code-editor | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-server-depot | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-query-builder | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| dependencies | unvetted-dep:@finos/legend-server-lakehouse | AI (dependencies): Core FINOS Legend monorepo package; no malware indicators. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Type-only package loaded by convention in React projects; stable false positive. | ai | |
| phantom-deps | phantom-dep:@types/react-dom | AI (phantom-deps): Type-only package loaded by convention in React projects; stable false positive. | ai |
Versions (showing 100 of 215)
| Version | Deps | Published |
|---|---|---|
| 0.7.91 | 21 / 11 | |
| 0.7.90 | 21 / 11 | |
| 0.7.89 | 21 / 11 | |
| 0.7.88 | 21 / 11 | |
| 0.7.87 | 21 / 11 | |
| 0.7.86 | 21 / 11 | |
| 0.7.85 | 21 / 11 | |
| 0.7.84 | 21 / 11 | |
| 0.7.83 | 21 / 11 | |
| 0.7.82 | 21 / 11 | |
| 0.7.81 | 21 / 11 | |
| 0.7.80 | 21 / 11 | |
| 0.7.79 | 21 / 11 | |
| 0.7.78 | 21 / 11 | |
| 0.7.77 | 21 / 11 | |
| 0.7.76 | 21 / 11 | |
| 0.7.75 | 21 / 11 | |
| 0.7.74 | 21 / 11 | |
| 0.7.73 | 21 / 11 | |
| 0.7.72 | 21 / 11 | |
| 0.7.71 | 21 / 11 | |
| 0.7.70 | 21 / 11 | |
| 0.7.69 | 21 / 11 | |
| 0.7.68 | 21 / 11 | |
| 0.7.67 | 21 / 11 | |
| 0.7.66 | 21 / 11 | |
| 0.7.65 | 21 / 11 | |
| 0.7.64 | 21 / 11 | |
| 0.7.63 | 21 / 11 | |
| 0.7.62 | 21 / 11 | |
| 0.7.61 | 21 / 11 | |
| 0.7.60 | 21 / 11 | |
| 0.7.59 | 21 / 11 | |
| 0.7.58 | 21 / 11 | |
| 0.7.57 | 21 / 11 | |
| 0.7.56 | 21 / 11 | |
| 0.7.55 | 21 / 11 | |
| 0.7.54 | 21 / 11 | |
| 0.7.53 | 21 / 11 | |
| 0.7.52 | 21 / 11 | |
| 0.7.51 | 21 / 11 | |
| 0.7.50 | 21 / 11 | |
| 0.7.49 | 21 / 11 | |
| 0.7.48 | 21 / 11 | |
| 0.7.47 | 21 / 11 | |
| 0.7.46 | 21 / 11 | |
| 0.7.45 | 21 / 11 | |
| 0.7.44 | 21 / 11 | |
| 0.7.42 | 21 / 11 | |
| 0.7.41 | 21 / 11 | |
| 0.7.40 | 21 / 11 | |
| 0.7.39 | 21 / 11 | |
| 0.7.38 | 21 / 11 | |
| 0.7.37 | 21 / 11 | |
| 0.7.36 | 21 / 11 | |
| 0.7.35 | 21 / 11 | |
| 0.7.34 | 21 / 11 | |
| 0.7.33 | 21 / 11 | |
| 0.7.32 | 21 / 11 | |
| 0.7.31 | 21 / 11 | |
| 0.7.30 | 21 / 11 | |
| 0.7.29 | 21 / 11 | |
| 0.7.28 | 21 / 11 | |
| 0.7.27 | 21 / 11 | |
| 0.7.26 | 21 / 11 | |
| 0.7.25 | 21 / 11 | |
| 0.7.24 | 21 / 11 | |
| 0.7.23 | 21 / 11 | |
| 0.7.22 | 21 / 11 | |
| 0.7.21 | 21 / 11 | |
| 0.7.20 | 21 / 11 | |
| 0.7.19 | 21 / 11 | |
| 0.7.18 | 21 / 11 | |
| 0.7.17 | 21 / 11 | |
| 0.7.16 | 21 / 11 | |
| 0.7.15 | 21 / 11 | |
| 0.7.14 | 21 / 11 | |
| 0.7.13 | 21 / 11 | |
| 0.7.12 | 21 / 11 | |
| 0.7.11 | 21 / 11 | |
| 0.7.10 | 21 / 11 | |
| 0.7.9 | 21 / 11 | |
| 0.7.8 | 21 / 11 | |
| 0.7.7 | 21 / 11 | |
| 0.7.6 | 21 / 11 | |
| 0.7.5 | 21 / 11 | |
| 0.7.4 | 21 / 11 | |
| 0.7.3 | 21 / 11 | |
| 0.7.2 | 21 / 11 | |
| 0.7.1 | 21 / 11 | |
| 0.7.0 | 21 / 11 | |
| 0.6.15 | 20 / 11 | |
| 0.6.14 | 20 / 11 | |
| 0.6.13 | 20 / 11 | |
| 0.6.12 | 20 / 11 | |
| 0.6.11 | 20 / 11 | |
| 0.6.10 | 20 / 11 | |
| 0.6.9 | 20 / 11 | |
| 0.6.8 | 20 / 11 | |
| 0.6.7 | 20 / 11 |
v0.7.91
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.90
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.89
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.88
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.87
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.86
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.85
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.84
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.83
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.63
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.62
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.61
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.59
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.51
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.46
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.45
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.38
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.35
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.30
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.29
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.27
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.21
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.7.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.