@itentialopensource/adapter-gitlab

This adapter integrates with system described as: gitlab.

Supply chain provenance

Status for the latest visible version.

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

Keywords

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
publish-pattern	dormant-publish	AI (publish-pattern): Established Itential adapter org with 454 approved packages; dormancy consistent with infrequent maintenance cycles.	ai	2026/05/31
semgrep	semgrep:child-process-import	AI (semgrep): child_process used for adapter setup/migration utilities; consistent with Itential adapter framework pattern.	ai	2026/05/21
semgrep	semgrep:dynamic-require	AI (semgrep): Dynamic require loads local JSON config files (__dirname-anchored); not arbitrary module loading.	ai	2026/05/21
install-scripts	install-script:preinstall	AI (install-scripts): Itential adapter framework uses preinstall for setup scaffolding; stable pattern across all versions of this package family.	ai	2026/05/21
phantom-deps	phantom-dep:prompts	AI (phantom-deps): prompts used in interactive utility scripts, not main adapter code; stable false positive for this package.	ai	2026/05/21
phantom-deps	phantom-dep:mocha-param	AI (phantom-deps): mocha-param referenced in test config files; phantom-dep heuristic fires because it's not directly imported in main source.	ai	2026/05/21
phantom-deps	phantom-dep:ping	AI (phantom-deps): ping is used in connectivity/healthcheck utility scripts referenced in package.json scripts, not directly imported in main code.	ai	2026/05/21

Version	Deps	Published
1.0.2	15 / 6	2026-05-13
1.0.1	15 / 6	2026-04-28
1.0.0	15 / 6	2026-04-13