@goodfoot/wiki
32
Versions
—
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
johnwehr
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:env-spread | AI (semgrep): process.env spread into spawnSync for cargo build; standard toolchain env forwarding, not exfiltration. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process used solely to invoke cargo for native binary compilation; expected pattern for this package. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Postinstall selects platform-specific prebuilt binary from optional deps; standard native CLI distribution pattern. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Tiny payload and no description are expected for a CLI binary wrapper package; not spam indicators here. | ai |
Versions (showing 32 of 32)
| Version | Deps | Published |
|---|---|---|
| 0.5.71 | 0 / 0 | |
| 0.5.65 | 0 / 0 | |
| 0.5.63 | 0 / 0 | |
| 0.5.62 | 0 / 0 | |
| 0.5.61 | 0 / 0 | |
| 0.5.60 | 0 / 0 | |
| 0.5.58 | 0 / 0 | |
| 0.5.57 | 0 / 0 | |
| 0.5.54 | 0 / 0 | |
| 0.5.53 | 0 / 0 | |
| 0.5.52 | 0 / 0 | |
| 0.5.51 | 0 / 0 | |
| 0.5.49 | 0 / 0 | |
| 0.5.48 | 0 / 0 | |
| 0.5.46 | 0 / 0 | |
| 0.5.45 | 0 / 0 | |
| 0.5.44 | 0 / 0 | |
| 0.5.41 | 0 / 0 | |
| 0.5.39 | 0 / 0 | |
| 0.5.38 | 0 / 0 | |
| 0.5.37 | 0 / 0 | |
| 0.5.35 | 0 / 0 | |
| 0.5.33 | 0 / 0 | |
| 0.5.32 | 0 / 0 | |
| 0.5.31 | 0 / 0 | |
| 0.5.24 | 0 / 0 | |
| 0.5.22 | 0 / 0 | |
| 0.5.21 | 0 / 0 | |
| 0.5.19 | 0 / 0 | |
| 0.5.15 | 0 / 0 | |
| 0.5.14 | 0 / 0 | |
| 0.5.0 | 0 / 0 |