@gjsify/net
14
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
jumplinkschanzewlsh
Keywords
gjsnodenet
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@gjsify/utils | AI (phantom-deps): Same org scope; likely re-exported or used indirectly via peer packages, consistent with gjsify modular architecture. | ai | |
| phantom-deps | phantom-dep:@girs/glib-2.0 | AI (phantom-deps): GLib type bindings referenced in config/tsconfig; not directly imported in source is expected for type-only deps. | ai | |
| provenance | no-provenance | AI (provenance): Consistent across all versions of this package; no other risk signals present. | ai | |
| typosquat | typosquat.levenshtein:got | AI (typosquat): Coincidental edit-distance match; unrelated GJS ecosystem package. | ai | |
| typosquat | typosquat.levenshtein:knex | AI (typosquat): Coincidental edit-distance match; unrelated GJS ecosystem package. | ai | |
| typosquat | typosquat.levenshtein:next | AI (typosquat): @gjsify/net is a GJS net module polyfill, not a typosquat of 'next'; scoped package with 47 versions. | ai | |
| phantom-deps | phantom-dep:@gjsify/events | AI (phantom-deps): Same-org dependency; likely re-exported or used indirectly via peer modules. | ai | |
| phantom-deps | phantom-dep:@gjsify/stream | AI (phantom-deps): Same-org dependency; likely re-exported or used indirectly via peer modules. | ai | |
| phantom-deps | phantom-dep:@gjsify/buffer | AI (phantom-deps): Same-org dependency; likely re-exported or used indirectly via peer modules. | ai | |
| typosquat | typosquat.levenshtein:nuxt | AI (typosquat): Same as above; edit-distance match is coincidental for this GJS net module. | ai | |
| typosquat | typosquat.levenshtein:jest | AI (typosquat): Coincidental edit-distance match; unrelated GJS ecosystem package. | ai |