@heliosjs/core
Core functionality for @heliosjs
17
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
naumovoleh
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:url | AI (phantom-deps): url is a Node.js polyfill; commonly declared but used indirectly via transpilation. | ai | |
| phantom-deps | phantom-dep:tsconfig-paths | AI (phantom-deps): tsconfig-paths is a config-only utility; not imported in code. Stable pattern for this package. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): Scoped package @heliosjs/core; 'core' vs 'cors' is incidental, not impersonation of the cors package. | ai | |
| dependencies | unvetted-dep:http | AI (dependencies): [email protected] is npm's security placeholder; no malicious code, just a misguided dep on a built-in module name. | ai |