@flipdish/events
A TypeScript package for handling event schemas and types in Flipdish's event-driven architecture.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:dynamic-require | AI (semgrep): Fires only in test validation helper; stable pattern for this package across versions. | ai | |
| phantom-deps | phantom-dep:dotenv | AI (phantom-deps): Config-referenced utility; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:aws-sdk | AI (phantom-deps): Config-referenced utility; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@jest/types | AI (phantom-deps): Framework-scoped package loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): Framework-scoped package loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@aws-sdk/client-cloudwatch-logs | AI (phantom-deps): Framework-scoped package loaded by convention; stable false positive. | ai |
Versions (showing 51 of 198)
| Version | Deps | Published |
|---|---|---|
| 1.26204.0 | 8 / 14 | |
| 1.26201.0 | 8 / 14 | |
| 1.26198.0 | 8 / 14 | |
| 1.26197.0 | 8 / 14 | |
| 1.26196.1 | 8 / 14 | |
| 1.26196.0 | 8 / 14 | |
| 1.26195.2 | 8 / 14 | |
| 1.26195.1 | 8 / 14 | |
| 1.26195.0 | 8 / 14 | |
| 1.26191.0 | 8 / 14 | |
| 1.26190.1 | 8 / 14 | |
| 1.26190.0 | 8 / 14 | |
| 1.26189.0 | 8 / 14 | |
| 1.26187.0 | 8 / 14 | |
| 1.26182.0 | 8 / 14 | |
| 1.26177.0 | 8 / 14 | |
| 1.26176.0 | 8 / 14 | |
| 1.26169.7 | 8 / 14 | |
| 1.26169.6 | 8 / 14 | |
| 1.26169.5 | 8 / 14 | |
| 1.26169.4 | 8 / 14 | |
| 1.26169.3 | 8 / 14 | |
| 1.26169.2 | 8 / 14 | |
| 1.26169.1 | 8 / 14 | |
| 1.26169.0 | 8 / 14 | |
| 1.26166.0 | 8 / 14 | |
| 1.26163.0 | 8 / 14 | |
| 1.26162.0 | 8 / 14 | |
| 1.26161.0 | 8 / 14 | |
| 1.26156.0 | 8 / 14 | |
| 1.26153.0 | 8 / 14 | |
| 1.26152.0 | 8 / 14 | |
| 1.26146.0 | 8 / 14 | |
| 1.26142.1 | 8 / 14 | |
| 1.26142.0 | 9 / 14 | |
| 1.26140.2 | 9 / 14 | |
| 1.26140.1 | 9 / 14 | |
| 1.26140.0 | 9 / 14 | |
| 1.26138.0 | 9 / 14 | |
| 1.26135.0 | 9 / 14 | |
| 1.26132.0 | 9 / 14 | |
| 1.26126.0 | 8 / 14 | |
| 1.26125.0 | 8 / 14 | |
| 1.26120.1 | 8 / 14 | |
| 1.26120.0 | 8 / 14 | |
| 1.26119.0 | 8 / 14 | |
| 1.26104.0 | 8 / 14 | |
| 1.26103.0 | 8 / 14 | |
| 1.26098.0 | 8 / 14 | |
| 1.26092.0 | 8 / 14 | |
| 1.25342.0 | 7 / 14 |
v1.26204.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26201.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26198.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26197.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26196.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26196.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26195.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26195.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26195.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26191.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26190.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26190.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26189.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26187.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26182.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.