@finos/legend-query-builder
Legend query builder core
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:serializr | AI (dependencies): serializr is a well-known, stable serialization library; stable dependency for this package. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): react-dom is a peer/runtime dep declared for consumers; not directly imported in source is expected for a library. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Framework-scoped type package; loaded by convention in TypeScript React projects. | ai | |
| phantom-deps | phantom-dep:@types/react-dom | AI (phantom-deps): Framework-scoped type package; loaded by convention in TypeScript React projects. | ai | |
| phantom-deps | phantom-dep:@testing-library/dom | AI (phantom-deps): Testing utility loaded transitively by @testing-library/react; not directly imported is expected. | ai |
Versions (showing 87 of 87)
| Version | Deps | Published |
|---|---|---|
| 4.18.30 | 24 / 9 | |
| 4.18.29 | 24 / 9 | |
| 4.18.28 | 24 / 9 | |
| 4.18.27 | 24 / 9 | |
| 4.18.26 | 24 / 9 | |
| 4.18.25 | 24 / 9 | |
| 4.18.24 | 24 / 9 | |
| 4.18.23 | 24 / 9 | |
| 4.18.22 | 24 / 9 | |
| 4.18.21 | 24 / 9 | |
| 4.18.20 | 24 / 9 | |
| 4.18.19 | 24 / 9 | |
| 4.18.18 | 24 / 9 | |
| 4.18.17 | 24 / 9 | |
| 4.18.16 | 24 / 9 | |
| 4.18.15 | 24 / 9 | |
| 4.18.14 | 24 / 9 | |
| 4.18.13 | 24 / 9 | |
| 4.18.12 | 24 / 9 | |
| 4.18.11 | 24 / 9 | |
| 4.18.10 | 24 / 9 | |
| 4.18.9 | 24 / 9 | |
| 4.18.8 | 24 / 9 | |
| 4.18.7 | 24 / 9 | |
| 4.18.6 | 24 / 9 | |
| 4.18.5 | 24 / 9 | |
| 4.18.4 | 24 / 9 | |
| 4.18.3 | 24 / 9 | |
| 4.18.2 | 24 / 9 | |
| 4.18.1 | 24 / 9 | |
| 4.18.0 | 24 / 9 | |
| 4.17.100 | 24 / 9 | |
| 4.17.99 | 24 / 9 | |
| 4.17.98 | 24 / 9 | |
| 4.17.97 | 24 / 9 | |
| 4.17.96 | 24 / 9 | |
| 4.17.95 | 24 / 9 | |
| 4.17.94 | 24 / 9 | |
| 4.17.93 | 24 / 9 | |
| 4.17.92 | 24 / 9 | |
| 4.17.91 | 24 / 9 | |
| 4.17.90 | 24 / 9 | |
| 4.17.89 | 24 / 9 | |
| 4.17.88 | 24 / 9 | |
| 4.17.87 | 24 / 9 | |
| 4.17.86 | 24 / 9 | |
| 4.17.85 | 24 / 9 | |
| 4.17.84 | 24 / 9 | |
| 4.17.82 | 24 / 9 | |
| 4.17.81 | 24 / 9 | |
| 4.17.80 | 24 / 9 | |
| 4.17.79 | 24 / 9 | |
| 4.17.78 | 24 / 9 | |
| 4.17.77 | 24 / 9 | |
| 4.17.76 | 24 / 9 | |
| 4.17.75 | 24 / 9 | |
| 4.17.74 | 24 / 9 | |
| 4.17.73 | 24 / 9 | |
| 4.17.72 | 24 / 9 | |
| 4.17.71 | 24 / 9 | |
| 4.17.70 | 24 / 9 | |
| 4.17.69 | 24 / 9 | |
| 4.17.68 | 24 / 9 | |
| 4.17.67 | 24 / 9 | |
| 4.17.66 | 24 / 9 | |
| 4.17.65 | 24 / 9 | |
| 4.17.64 | 24 / 9 | |
| 4.17.63 | 24 / 9 | |
| 4.17.62 | 24 / 9 | |
| 4.17.61 | 24 / 9 | |
| 4.17.60 | 24 / 9 | |
| 4.17.59 | 24 / 9 | |
| 4.17.58 | 24 / 9 | |
| 4.17.57 | 24 / 9 | |
| 4.17.56 | 24 / 9 | |
| 4.17.55 | 24 / 9 | |
| 4.17.54 | 24 / 9 | |
| 4.17.53 | 24 / 9 | |
| 4.7.4 | 21 / 9 | |
| 4.7.3 | 21 / 9 | |
| 4.7.2 | 21 / 9 | |
| 4.7.1 | 21 / 9 | |
| 4.7.0 | 21 / 9 | |
| 4.6.0 | 21 / 9 | |
| 4.5.1 | 21 / 9 | |
| 4.5.0 | 21 / 9 | |
| 4.4.0 | 21 / 9 |
v4.18.30
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.18.29
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.18.28
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.18.27
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.18.26
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.18.25
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.18.24
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.18.23
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.18.22
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.18.21
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.98
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.97
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.96
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.95
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.94
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.93
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.92
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.91
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.90
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.89
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.88
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.87
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.86
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.85
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.84
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.82
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.81
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.80
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.78
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.77
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.76
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.75
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.74
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.73
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.72
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.71
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.70
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.69
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.68
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.67
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.66
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.65
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.64
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.63
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.62
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.61
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.60
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.59
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.58
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.56
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.55
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.17.54
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.17.53
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.7.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.7.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.7.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.7.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.7.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.6.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.5.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.5.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.4.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.