@itentialopensource/adapter-db_mongo
Itential adapter to connect to mongo
6
Versions
Apache-2.0
License
Yes
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
jared.obrienjohnpolanskyzack.strulovitchitential-ciandyknaebelishitaprakash
Keywords
ItentialItential PlatformAutomationIntegrationAdapterPersistenceMongoPre-Release
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| install-scripts | install-script:preinstall | AI (install-scripts): Itential adapter setup script pattern; runs local node script, not arbitrary remote code. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process used only in testRunner.js test utility, not in runtime adapter code. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Dynamic require loads package.json for version info; path is controlled, not user-supplied. | ai | |
| phantom-deps | phantom-dep:mocha | AI (phantom-deps): mocha is listed as a runtime dependency and used in test scripts; phantom-dep is a false positive here. | ai |