@gitlab/query-language-rust
GLQL transpiler, wrapping the WASM build, written in Rust
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | encoded-string-file:dist/main.js | AI (source-diff): Base64-encoded WASM binary bundled via @rollup/plugin-wasm; expected artifact for a Rust/WASM package. | ai | |
| source-diff | obfuscated-file:npm/dist/main.js | AI (source-diff): wasm-bindgen JS glue output; long lines are expected in WASM wrapper code for this package. | ai | |
| source-diff | net-exec-file:npm/dist/main.js | AI (source-diff): WASM memory/buffer operations trigger net-exec heuristic; no actual network calls or eval in the sample. | ai | |
| source-diff | encoded-string-file:npm/dist/main.js | AI (source-diff): Base64-encoded WASM binary inlined by @rollup/plugin-wasm; expected artifact for this Rust/WASM package. | ai | |
| phantom-deps | phantom-dep:format-graphql | AI (phantom-deps): format-graphql is declared as a dependency but used only in config/scripts context; stable false positive for this package. | ai |
Versions (showing 51 of 64)
| Version | Deps | Published |
|---|---|---|
| 0.31.0 | 1 / 23 | |
| 0.30.0 | 1 / 23 | |
| 0.29.0 | 1 / 23 | |
| 0.28.0 | 1 / 23 | |
| 0.27.2 | 1 / 23 | |
| 0.27.1 | 1 / 23 | |
| 0.27.0 | 1 / 23 | |
| 0.26.0 | 1 / 23 | |
| 0.25.0 | 1 / 23 | |
| 0.20.11 | 2 / 23 | |
| 0.20.10 | 2 / 23 | |
| 0.20.1 | 2 / 26 | |
| 0.20.0 | 2 / 26 | |
| 0.19.4 | 0 / 14 | |
| 0.19.3 | 0 / 14 | |
| 0.19.2 | 0 / 14 | |
| 0.19.1 | 0 / 14 | |
| 0.19.0 | 0 / 14 | |
| 0.18.6 | 0 / 14 | |
| 0.18.5 | 0 / 13 | |
| 0.18.4 | 0 / 13 | |
| 0.18.3 | 0 / 13 | |
| 0.18.2 | 0 / 13 | |
| 0.18.1 | 0 / 13 | |
| 0.18.0 | 0 / 13 | |
| 0.17.0 | 0 / 13 | |
| 0.16.1 | 0 / 13 | |
| 0.16.0 | 0 / 13 | |
| 0.15.0 | 0 / 13 | |
| 0.14.1 | 0 / 13 | |
| 0.14.0 | 0 / 13 | |
| 0.13.2 | 0 / 13 | |
| 0.13.1 | 0 / 13 | |
| 0.13.0 | 0 / 13 | |
| 0.12.0 | 0 / 13 | |
| 0.11.4 | 0 / 13 | |
| 0.11.3 | 0 / 13 | |
| 0.11.1 | 0 / 13 | |
| 0.11.0 | 0 / 13 | |
| 0.10.0 | 0 / 13 | |
| 0.9.2 | 0 / 12 | |
| 0.9.1 | 0 / 12 | |
| 0.9.0 | 0 / 12 | |
| 0.8.5 | 0 / 12 | |
| 0.8.4 | 0 / 12 | |
| 0.8.3 | 0 / 12 | |
| 0.8.2 | 0 / 12 | |
| 0.8.1 | 0 / 12 | |
| 0.8.0 | 0 / 12 | |
| 0.7.0 | 0 / 12 | |
| 0.6.0 | 0 / 12 |
v0.31.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.30.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.6.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.