@hypen-space/cli
Hypen CLI - Create and manage Hypen applications
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@babel/runtime | AI (phantom-deps): Framework-scoped runtime dep loaded by convention, not direct import. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): 127.0.0.1 is a localhost sidecar health-check URL, not an external raw-IP connection. | ai | |
| semgrep | semgrep:etc-passwd-access | AI (semgrep): Hit is inside a comment explaining path traversal prevention, not actual /etc/passwd access. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Postinstall only runs `bun install` in a sub-directory; no arbitrary code fetch or execution. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): env spread used to pass environment to a spawned shell process — standard and expected for a CLI/terminal tool. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Used in a live-preview sandbox to execute user-authored module code; expected pattern for this tool. | ai | |
| phantom-deps | phantom-dep:bun-plugin-tailwind | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tw-animate-css | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tailwindcss | AI (phantom-deps): Config-file reference only; not a real missing import for this CLI package. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped org package @hypen-space/cli; Levenshtein match to 'joi' is a false positive with no brand impersonation intent. | ai | |
| phantom-deps | phantom-dep:@hypen-space/web | AI (phantom-deps): Same org scope; likely a peer/optional dep, not a malicious phantom dependency. | ai |
Versions (showing 60 of 60)
| Version | Deps | Published |
|---|---|---|
| 0.5.4 | 23 / 3 | |
| 0.5.3 | 23 / 3 | |
| 0.5.2 | 23 / 3 | |
| 0.4.956 | 23 / 3 | |
| 0.4.955 | 23 / 3 | |
| 0.4.954 | 23 / 3 | |
| 0.4.953 | 23 / 3 | |
| 0.4.952 | 23 / 3 | |
| 0.4.951 | 23 / 3 | |
| 0.4.950 | 23 / 3 | |
| 0.4.949 | 23 / 3 | |
| 0.4.948 | 23 / 3 | |
| 0.4.947 | 22 / 3 | |
| 0.4.946 | 22 / 3 | |
| 0.4.945 | 22 / 3 | |
| 0.4.943 | 22 / 3 | |
| 0.4.942 | 22 / 3 | |
| 0.4.941 | 22 / 3 | |
| 0.4.91 | 9 / 3 | |
| 0.4.46 | 9 / 3 | |
| 0.4.45 | 9 / 3 | |
| 0.4.44 | 9 / 3 | |
| 0.4.43 | 9 / 3 | |
| 0.4.42 | 9 / 3 | |
| 0.4.41 | 9 / 3 | |
| 0.4.40 | 9 / 3 | |
| 0.4.39 | 9 / 3 | |
| 0.4.38 | 9 / 3 | |
| 0.4.37 | 7 / 3 | |
| 0.4.36 | 7 / 3 | |
| 0.4.35 | 7 / 3 | |
| 0.4.32 | 7 / 3 | |
| 0.4.31 | 7 / 3 | |
| 0.4.30 | 7 / 3 | |
| 0.4.29 | 7 / 3 | |
| 0.4.28 | 7 / 3 | |
| 0.4.27 | 7 / 3 | |
| 0.4.26 | 6 / 3 | |
| 0.4.25 | 6 / 3 | |
| 0.4.24 | 6 / 3 | |
| 0.4.23 | 6 / 3 | |
| 0.4.22 | 6 / 3 | |
| 0.4.21 | 6 / 3 | |
| 0.4.20 | 6 / 3 | |
| 0.4.19 | 6 / 3 | |
| 0.4.18 | 6 / 3 | |
| 0.4.17 | 6 / 3 | |
| 0.4.16 | 6 / 3 | |
| 0.4.15 | 6 / 3 | |
| 0.4.14 | 6 / 3 | |
| 0.4.13 | 6 / 3 | |
| 0.4.12 | 3 / 6 | |
| 0.4.11 | 3 / 6 | |
| 0.4.5 | 3 / 6 | |
| 0.4.3 | 3 / 6 | |
| 0.4.2 | 6 / 3 | |
| 0.4.1 | 6 / 3 | |
| 0.4.0 | 6 / 3 | |
| 0.3.10 | 6 / 3 | |
| 0.3.8 | 3 / 3 |
v0.5.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.5.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.5.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.956
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.955
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.954
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.953
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.952
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.951
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.950
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.949
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.947
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.946
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.945
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.943
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.942
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.46
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.44
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.43
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.42
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.41
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.40
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.39
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.38
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.37
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.36
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.32
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.30
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.29
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.28
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.27
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.26
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.25
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.23
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.22
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.21
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.20
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.19
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.16
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.15
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.14
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.