@fugood/bricks-cli
BRICKS CLI - Command-line interface for BRICKS Workspace API
17
Versions
UNLICENSED
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
pepper.yenjhen0409hans00bricks_deploymentshanecsw
Keywords
brickscligraphqlworkspace
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:prettier | AI (phantom-deps): Webpack-bundled CLI; runtime deps are bundled, not directly imported at module level. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@fugood/bricks-config-core | AI (phantom-deps): Same-org dep bundled via webpack; phantom-dep heuristic is a false positive for this build pattern. | ai | |
| phantom-deps | phantom-dep:conf | AI (phantom-deps): Webpack-bundled CLI; deps inlined in bundle, not directly imported at module level. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Fires inside webpack bundle output; standard bundler pattern for this CLI package. | ai | |
| phantom-deps | phantom-dep:ink-picture | AI (phantom-deps): Webpack-bundled CLI; deps inlined in bundle, not directly imported at module level. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): Webpack-bundled CLI; deps inlined in bundle, not directly imported at module level. | ai | |
| phantom-deps | phantom-dep:ink | AI (phantom-deps): Webpack-bundled CLI; deps inlined in bundle, not directly imported at module level. | ai |