@finos/legend-application-query
Legend Query application core
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:serializr | AI (dependencies): serializr is a well-known MobX serialization library; stable dependency for this package. | ai | |
| dependencies | unvetted-dep:react-oidc-context | AI (dependencies): react-oidc-context is a standard OIDC wrapper; expected dependency for an app with authentication. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Type-only framework package; convention-loaded, not directly imported. Stable FP for this package. | ai | |
| phantom-deps | phantom-dep:@types/react-dom | AI (phantom-deps): Type-only framework package; convention-loaded, not directly imported. Stable FP for this package. | ai | |
| phantom-deps | phantom-dep:@testing-library/dom | AI (phantom-deps): Testing framework peer; loaded by convention. Stable FP for this package. | ai | |
| phantom-deps | phantom-dep:reactflow | AI (phantom-deps): Declared runtime dep used via config/indirect import; stable FP for this package. | ai |
Versions (showing 51 of 464)
| Version | Deps | Published |
|---|---|---|
| 13.8.36 | 24 / 9 | |
| 13.8.35 | 24 / 9 | |
| 13.8.34 | 24 / 9 | |
| 13.8.33 | 24 / 9 | |
| 13.8.32 | 24 / 9 | |
| 13.8.31 | 24 / 9 | |
| 13.8.30 | 24 / 9 | |
| 13.8.29 | 24 / 9 | |
| 13.8.28 | 24 / 9 | |
| 13.8.27 | 24 / 9 | |
| 13.8.26 | 24 / 9 | |
| 13.8.25 | 24 / 9 | |
| 13.8.24 | 24 / 9 | |
| 13.8.23 | 24 / 9 | |
| 13.8.22 | 24 / 9 | |
| 13.8.21 | 24 / 9 | |
| 13.8.20 | 24 / 9 | |
| 13.8.19 | 24 / 9 | |
| 13.8.18 | 24 / 9 | |
| 13.8.17 | 24 / 9 | |
| 13.8.16 | 24 / 9 | |
| 13.8.15 | 24 / 9 | |
| 13.8.14 | 24 / 9 | |
| 13.8.13 | 24 / 9 | |
| 13.8.12 | 24 / 9 | |
| 13.8.11 | 24 / 9 | |
| 13.8.10 | 24 / 9 | |
| 13.8.9 | 24 / 9 | |
| 13.8.8 | 24 / 9 | |
| 13.8.7 | 24 / 9 | |
| 13.8.6 | 24 / 9 | |
| 13.8.5 | 24 / 9 | |
| 13.8.4 | 24 / 9 | |
| 13.8.3 | 24 / 9 | |
| 13.8.2 | 24 / 9 | |
| 13.8.1 | 24 / 9 | |
| 13.8.0 | 24 / 9 | |
| 13.7.205 | 23 / 9 | |
| 13.7.204 | 23 / 9 | |
| 13.7.203 | 23 / 9 | |
| 13.7.202 | 23 / 9 | |
| 13.7.201 | 23 / 9 | |
| 13.7.200 | 21 / 9 | |
| 13.7.199 | 21 / 9 | |
| 13.7.198 | 21 / 9 | |
| 13.7.197 | 21 / 9 | |
| 13.7.196 | 21 / 9 | |
| 13.7.195 | 21 / 9 | |
| 13.7.193 | 21 / 9 | |
| 13.7.192 | 21 / 9 | |
| 13.7.191 | 21 / 9 |
v13.8.36
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.35
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.34
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.33
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.32
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.31
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.30
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.29
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.28
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.8.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.205
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.204
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.203
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.202
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.201
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.200
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.199
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.198
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.197
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.196
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.195
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.193
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.192
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.7.191
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.