@growflow/jest

Shareable Jest configuration to get testing up and running quickly for GrowFlow frontend and backend applications

Supply chain provenance

Status for the latest visible version.

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

Keywords

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
typosquat	typosquat.levenshtein:next	AI (typosquat): Scoped package @growflow/jest is a Jest config wrapper; Levenshtein match to 'next' is a false positive.	ai	2026/04/29
semgrep	semgrep:dynamic-require	AI (semgrep): Dynamic require loads a tsconfig file path — standard config-resolution pattern, not arbitrary module loading.	ai	2026/04/29
phantom-deps	phantom-dep:jest	AI (phantom-deps): jest is a peer/runtime dep exposed to consumers of this config package; not directly imported in lib code by design.	ai	2026/04/29
phantom-deps	phantom-dep:@types/jest	AI (phantom-deps): Framework-scoped type package loaded by convention; false positive for config packages.	ai	2026/04/29
phantom-deps	phantom-dep:ttypescript	AI (phantom-deps): Referenced in config files rather than directly imported; expected pattern for a shareable config package.	ai	2026/04/29
phantom-deps	phantom-dep:jest-ts-auto-mock	AI (phantom-deps): Referenced in config files rather than directly imported; expected pattern for a shareable config package.	ai	2026/04/29
phantom-deps	phantom-dep:identity-obj-proxy	AI (phantom-deps): Referenced in config files rather than directly imported; expected pattern for a shareable config package.	ai	2026/04/29

Version	Deps	Published
10.1.0	9 / 2	2022-04-07