@git-stunts/git-warp
47
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
flyingrobots
Keywords
gitgit-stuntswarpworldlinegraphgraph-databaselocal-firstcrdtdagmerklecommit-graphcontent-addressablehexagonaldddinvisible-storageempty-tree
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:boxen | AI (phantom-deps): Listed in dependencies and referenced in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:string-width | AI (phantom-deps): Listed in dependencies and referenced in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:cli-table3 | AI (phantom-deps): Listed in dependencies and referenced in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:elkjs | AI (phantom-deps): Listed in dependencies and referenced in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): Listed in dependencies and referenced in config; stable false positive for this package. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Standard child-process env passthrough in bisect CLI; not exfiltration. | ai | |
| phantom-deps | phantom-dep:@git-stunts/git-cas | AI (phantom-deps): Same-org dep; may be used indirectly or via re-export rather than direct import. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Used for signature verification in SyncAuthService — standard crypto pattern. | ai | |
| phantom-deps | phantom-dep:wrap-ansi | AI (phantom-deps): wrap-ansi is a declared runtime dep for CLI output; stable false positive. | ai | |
| phantom-deps | phantom-dep:figures | AI (phantom-deps): figures is a declared runtime dep for CLI output; stable false positive. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): zod is a declared runtime dep used in config/schema validation; stable false positive. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Decoding git bitmap index data; legitimate domain use, not obfuscation. | ai |
Versions (showing 47 of 47)
| Version | Deps | Published |
|---|---|---|
| 18.2.1 | 15 / 17 | |
| 18.2.0 | 15 / 17 | |
| 18.1.2 | 15 / 16 | |
| 18.1.1 | 15 / 16 | |
| 18.1.0 | 15 / 16 | |
| 18.0.0 | 15 / 16 | |
| 17.0.0 | 15 / 16 | |
| 16.0.0 | 15 / 13 | |
| 15.0.1 | 15 / 13 | |
| 15.0.0 | 15 / 13 | |
| 14.16.2 | 15 / 13 | |
| 14.16.0 | 15 / 13 | |
| 14.15.0 | 15 / 13 | |
| 14.14.0 | 15 / 13 | |
| 14.13.0 | 15 / 13 | |
| 14.12.0 | 15 / 13 | |
| 14.11.0 | 15 / 13 | |
| 14.10.0 | 15 / 13 | |
| 14.9.0 | 15 / 13 | |
| 14.8.0 | 15 / 13 | |
| 14.7.0 | 15 / 13 | |
| 14.6.0 | 15 / 13 | |
| 14.5.0 | 15 / 13 | |
| 14.4.0 | 15 / 13 | |
| 14.3.0 | 15 / 13 | |
| 14.2.0 | 16 / 14 | |
| 14.1.0 | 16 / 14 | |
| 14.0.0 | 16 / 13 | |
| 13.1.0 | 15 / 12 | |
| 13.0.1 | 14 / 12 | |
| 13.0.0 | 14 / 12 | |
| 12.4.1 | 14 / 12 | |
| 12.3.0 | 14 / 12 | |
| 12.2.1 | 14 / 12 | |
| 12.2.0 | 14 / 12 | |
| 12.1.0 | 14 / 12 | |
| 12.0.0 | 14 / 12 | |
| 11.5.1 | 14 / 12 | |
| 11.5.0 | 14 / 12 | |
| 11.3.3 | 14 / 12 | |
| 11.2.1 | 14 / 12 | |
| 10.8.0 | 14 / 12 | |
| 10.7.0 | 14 / 12 | |
| 10.4.2 | 14 / 12 | |
| 10.3.2 | 13 / 12 | |
| 10.1.2 | 13 / 12 | |
| 10.1.1 | 13 / 12 |
v18.2.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v18.2.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.0.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.