@grafana/k6-test-builder
k6 test builder
8
Versions
AGPL-3.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
gf_joshhuntgrafanabot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@material-ui/lab | AI (dependencies): Standard MUI v4 lab component; stable dependency for this UI library package. | ai | |
| dependencies | unvetted-dep:@parcel/transformer-svg-react | AI (dependencies): Parcel build tooling dependency; expected for this package's SVG handling. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Grafana-org internal library; sparse metadata is expected for org-internal tooling, not spam. | ai | |
| phantom-deps | phantom-dep:redux | AI (phantom-deps): redux is a transitive peer used via react-redux/reduxjs-toolkit; not directly imported but legitimately declared. | ai | |
| phantom-deps | phantom-dep:@parcel/transformer-svg-react | AI (phantom-deps): Build tool referenced in parcel config, not imported in source; stable false positive. | ai | |
| phantom-deps | phantom-dep:@emotion/react | AI (phantom-deps): Emotion packages are MUI peer deps referenced in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@emotion/styled | AI (phantom-deps): Same as @emotion/react — MUI peer dep, config-only reference. | ai |