@finos/legend-application-marketplace-bootstrap
Legend Marketplace application bootstrap
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:react | AI (phantom-deps): Bootstrap package; react declared for downstream consumers, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Type-only peer dependency pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@finos/legend-art | AI (phantom-deps): Same-org monorepo sibling; declared for re-export, not directly imported. | ai | |
| phantom-deps | phantom-dep:@finos/legend-lego | AI (phantom-deps): Same-org monorepo sibling; stable false positive for this bootstrap package. | ai | |
| phantom-deps | phantom-dep:@finos/legend-application | AI (phantom-deps): Same-org monorepo sibling; stable false positive for this bootstrap package. | ai | |
| phantom-deps | phantom-dep:@finos/legend-query-builder | AI (phantom-deps): Same-org monorepo sibling; stable false positive for this bootstrap package. | ai |
Versions (showing 51 of 196)
| Version | Deps | Published |
|---|---|---|
| 13.244.0 | 10 / 7 | |
| 13.243.0 | 10 / 7 | |
| 13.242.0 | 10 / 7 | |
| 13.241.0 | 10 / 7 | |
| 13.240.0 | 10 / 7 | |
| 13.238.0 | 10 / 7 | |
| 13.237.0 | 10 / 7 | |
| 13.236.0 | 10 / 7 | |
| 13.235.0 | 10 / 7 | |
| 13.234.0 | 10 / 7 | |
| 13.233.0 | 10 / 7 | |
| 13.232.0 | 10 / 7 | |
| 13.231.0 | 10 / 7 | |
| 13.230.0 | 10 / 7 | |
| 13.229.0 | 10 / 7 | |
| 13.228.0 | 10 / 7 | |
| 13.227.0 | 10 / 7 | |
| 13.225.0 | 10 / 7 | |
| 13.224.0 | 10 / 7 | |
| 13.223.0 | 10 / 7 | |
| 13.222.0 | 10 / 7 | |
| 13.221.0 | 10 / 7 | |
| 13.220.0 | 10 / 7 | |
| 13.219.0 | 10 / 7 | |
| 13.218.0 | 10 / 7 | |
| 13.217.0 | 10 / 7 | |
| 13.216.0 | 10 / 7 | |
| 13.215.0 | 10 / 7 | |
| 13.214.0 | 10 / 7 | |
| 13.213.0 | 10 / 7 | |
| 13.212.0 | 10 / 7 | |
| 13.211.0 | 10 / 7 | |
| 13.210.0 | 10 / 7 | |
| 13.209.0 | 10 / 7 | |
| 13.208.0 | 10 / 7 | |
| 13.207.0 | 10 / 7 | |
| 13.206.0 | 10 / 7 | |
| 13.205.0 | 10 / 7 | |
| 13.204.0 | 10 / 7 | |
| 13.203.0 | 10 / 7 | |
| 13.202.0 | 10 / 7 | |
| 13.201.0 | 10 / 7 | |
| 13.200.0 | 10 / 7 | |
| 13.199.0 | 10 / 7 | |
| 13.198.0 | 10 / 7 | |
| 13.197.0 | 10 / 7 | |
| 13.196.0 | 10 / 7 | |
| 13.195.0 | 10 / 7 | |
| 13.194.0 | 10 / 7 | |
| 13.193.0 | 10 / 7 | |
| 13.192.0 | 10 / 7 |
v13.244.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.243.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.242.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.241.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.240.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.238.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.237.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.236.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.235.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.234.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.233.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.