@fundamental-ngx/datetime-adapter Apache-2.0 7 versions

@fundamental-ngx/datetime-adapter

npm Repository Homepage

Datetime adapter for SAP Fundamentals, based on Day.js package

7

Versions

Apache-2.0

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

fundamental-ui

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	obfuscated-file:esm2022/lib/dayjs-datetime-adapter.mjs	AI (source-diff): ESM bundle output for Angular library; sample shows plain readable code, not obfuscation. Stable pattern for this package.	ai	2026/05/11
source-diff	obfuscated-file:esm2020/lib/dayjs-datetime-adapter.mjs	AI (source-diff): Angular compiled ESM output with ɵfac/ɵprov metadata triggers long-line heuristic; code is plaintext and readable.	ai	2026/05/11
phantom-deps	phantom-dep:tslib	AI (phantom-deps): tslib is a known implicit Angular/TypeScript runtime dep; stable false positive for this package.	ai	2026/05/04
bogus-package	bogus-package	AI (bogus-package): Established SAP monorepo library; sparse README/keywords are a consistent pattern across all its sub-packages.	ai	2026/05/04

Versions (showing 7 of 207)

Version	Deps	Published
0.35.6	1 / 0	2023-01-27
0.35.5	1 / 0	2022-12-05
0.35.4	1 / 0	2022-07-30
0.35.3	1 / 0	2022-07-23
0.35.2	1 / 0	2022-07-21
0.35.1	1 / 0	2022-06-24
0.35.0	1 / 0	2022-06-23

v0.35.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.35.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.35.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.35.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.35.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.35.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.35.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.