@itentialopensource/adapter-salesforce
This adapter integrates with system Salesforce
7
Versions
Apache-2.0
License
Yes
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
jared.obrienjohnpolanskyzack.strulovitchitential-ciandyknaebelishitaprakash
Keywords
ItentialItential PlatformAutomationIntegrationAdapterITSMTestingSalesforcePre-Release
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | dormant-publish | AI (publish-pattern): Established Itential adapter with 43 versions and trusted publisher track record; dormancy consistent with maintenance cadence. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Loads adapterBase.js via path.join — deterministic path construction, not user-controlled input. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): execSync/spawnSync used for adapter connectivity/troubleshooting utilities; consistent with documented adapter framework. | ai | |
| install-scripts | install-script:preinstall | AI (install-scripts): Itential adapter pattern; setup.js is a standard hook across all adapter versions in this ecosystem. | ai | |
| phantom-deps | phantom-dep:prompts | AI (phantom-deps): prompts used in setup/utility scripts, not main adapter code — stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:mocha-param | AI (phantom-deps): mocha-param referenced in test config files; stable false positive for this adapter package. | ai | |
| phantom-deps | phantom-dep:ping | AI (phantom-deps): ping is a declared runtime dep used in config/connectivity scripts, not directly imported in main code. | ai |