@heliofi/common
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:moment | AI (phantom-deps): moment is a declared runtime dep used transitively/in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:ts-jest | AI (phantom-deps): ts-jest referenced in jest config files; stable false positive for this package. | ai |
Versions (showing 51 of 665)
| Version | Deps | Published |
|---|---|---|
| 0.2.297 | 12 / 1 | |
| 0.2.296 | 12 / 1 | |
| 0.2.295 | 12 / 1 | |
| 0.2.294 | 12 / 1 | |
| 0.2.293 | 12 / 1 | |
| 0.2.292 | 12 / 1 | |
| 0.2.291 | 12 / 1 | |
| 0.2.290 | 12 / 1 | |
| 0.2.289 | 12 / 1 | |
| 0.2.288 | 12 / 1 | |
| 0.2.287 | 12 / 1 | |
| 0.2.286 | 12 / 1 | |
| 0.2.285 | 12 / 1 | |
| 0.2.284 | 12 / 1 | |
| 0.2.283 | 12 / 1 | |
| 0.2.282 | 12 / 1 | |
| 0.2.281 | 12 / 1 | |
| 0.2.280 | 12 / 1 | |
| 0.2.279 | 12 / 1 | |
| 0.2.276 | 12 / 1 | |
| 0.2.275 | 12 / 1 | |
| 0.2.274 | 12 / 1 | |
| 0.2.273 | 12 / 1 | |
| 0.2.272 | 12 / 1 | |
| 0.2.271 | 12 / 1 | |
| 0.2.262 | 12 / 1 | |
| 0.2.261 | 12 / 1 | |
| 0.2.260 | 12 / 1 | |
| 0.2.259 | 12 / 1 | |
| 0.2.258 | 12 / 1 | |
| 0.2.257 | 12 / 1 | |
| 0.2.256 | 12 / 1 | |
| 0.2.255 | 12 / 1 | |
| 0.2.254 | 12 / 1 | |
| 0.2.253 | 12 / 1 | |
| 0.2.252 | 12 / 1 | |
| 0.2.251 | 12 / 1 | |
| 0.2.248 | 12 / 1 | |
| 0.2.247 | 12 / 1 | |
| 0.2.246 | 12 / 1 | |
| 0.2.245 | 12 / 1 | |
| 0.2.244 | 12 / 1 | |
| 0.2.243 | 12 / 1 | |
| 0.2.242 | 12 / 1 | |
| 0.2.241 | 12 / 1 | |
| 0.2.240 | 12 / 1 | |
| 0.2.239 | 12 / 1 | |
| 0.2.238 | 12 / 1 | |
| 0.2.237 | 12 / 1 | |
| 0.2.236 | 12 / 1 | |
| 0.2.232 | 12 / 1 |
v0.2.297
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.296
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.295
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.294
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.293
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.292
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.291
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.290
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.289
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.288
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.287
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.286
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.285
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.284
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.283
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.282
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.281
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.280
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.279
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.276
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.275
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.274
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.