@jayree/sfdx-plugin-org
A Salesforce CLI plugin containing commands to configure State and Country/Territory Picklists and other org settings.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Package consistently published via GitHub Actions CI with SLSA attestation; jayree→GitHub Actions is expected automation pattern. | ai | |
| dependencies | unvetted-dep:tabletojson | AI (dependencies): Legitimate HTML-table parsing dep used by this Salesforce CLI plugin; stable across versions. | ai | |
| dependencies | unvetted-dep:@jayree/changelog | AI (dependencies): First-party changelog dep from same author; stable across versions. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit TypeScript runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:enquirer | AI (phantom-deps): enquirer is referenced via @listr2/prompt-adapter-enquirer and config files; stable false positive. | ai |
Versions (showing 51 of 134)
| Version | Deps | Published |
|---|---|---|
| 1.2.182 | 22 / 19 | |
| 1.2.181 | 22 / 19 | |
| 1.2.180 | 22 / 19 | |
| 1.2.179 | 22 / 19 | |
| 1.2.178 | 22 / 19 | |
| 1.2.177 | 22 / 19 | |
| 1.2.176 | 22 / 19 | |
| 1.2.175 | 22 / 19 | |
| 1.2.174 | 22 / 19 | |
| 1.2.173 | 22 / 19 | |
| 1.2.172 | 22 / 19 | |
| 1.2.171 | 22 / 19 | |
| 1.2.170 | 22 / 19 | |
| 1.2.169 | 22 / 19 | |
| 1.2.168 | 22 / 19 | |
| 1.2.167 | 22 / 19 | |
| 1.2.166 | 22 / 19 | |
| 1.2.165 | 22 / 19 | |
| 1.2.164 | 22 / 19 | |
| 1.2.163 | 22 / 19 | |
| 1.2.162 | 22 / 19 | |
| 1.2.161 | 22 / 19 | |
| 1.2.160 | 22 / 19 | |
| 1.2.159 | 22 / 19 | |
| 1.2.158 | 22 / 19 | |
| 1.2.157 | 22 / 19 | |
| 1.2.156 | 22 / 19 | |
| 1.2.155 | 22 / 19 | |
| 1.2.154 | 22 / 19 | |
| 1.2.153 | 22 / 19 | |
| 1.2.152 | 22 / 19 | |
| 1.2.151 | 22 / 19 | |
| 1.2.150 | 22 / 19 | |
| 1.2.149 | 22 / 19 | |
| 1.2.148 | 22 / 19 | |
| 1.2.147 | 22 / 19 | |
| 1.2.146 | 22 / 19 | |
| 1.2.145 | 22 / 19 | |
| 1.2.144 | 22 / 19 | |
| 1.2.143 | 22 / 19 | |
| 1.2.142 | 22 / 19 | |
| 1.2.141 | 22 / 19 | |
| 1.2.140 | 22 / 19 | |
| 1.2.139 | 22 / 19 | |
| 1.2.138 | 22 / 19 | |
| 1.2.137 | 22 / 19 | |
| 1.2.136 | 22 / 19 | |
| 1.2.135 | 22 / 19 | |
| 1.2.134 | 22 / 19 | |
| 1.2.133 | 22 / 19 | |
| 1.2.132 | 22 / 19 |
v1.2.182
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.2.181
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.2.180
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.2.179
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.