@jh-tech/util-tools-be
26
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
jackhayes
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:pg | AI (phantom-deps): pg is a runtime dep used via knex config, not directly imported. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Decodes cursor pagination strings; no payload execution, stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:eslint | AI (phantom-deps): ESLint is a dev/config dependency loaded by convention, not direct import. | ai | |
| phantom-deps | phantom-dep:axios | AI (phantom-deps): axios likely re-exported or used in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@eslint/compat | AI (phantom-deps): Framework-scoped ESLint package loaded by convention. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-n | AI (phantom-deps): ESLint plugin loaded via config, not direct import. | ai | |
| phantom-deps | phantom-dep:@eslint/eslintrc | AI (phantom-deps): ESLint config package loaded by convention. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-node | AI (phantom-deps): ESLint plugin loaded via config, not direct import. | ai | |
| phantom-deps | phantom-dep:@typescript-eslint/parser | AI (phantom-deps): TypeScript ESLint parser loaded via config, not direct import. | ai | |
| phantom-deps | phantom-dep:@typescript-eslint/eslint-plugin | AI (phantom-deps): TypeScript ESLint plugin loaded via config, not direct import. | ai | |
| phantom-deps | phantom-dep:eslint-import-resolver-typescript | AI (phantom-deps): ESLint resolver loaded via config, not direct import. | ai |
Versions (showing 26 of 26)
| Version | Deps | Published |
|---|---|---|
| 0.0.26 | 22 / 3 | |
| 0.0.25 | 22 / 3 | |
| 0.0.24 | 22 / 3 | |
| 0.0.23 | 22 / 3 | |
| 0.0.22 | 22 / 3 | |
| 0.0.21 | 22 / 3 | |
| 0.0.20 | 22 / 3 | |
| 0.0.19 | 22 / 3 | |
| 0.0.18 | 22 / 3 | |
| 0.0.17 | 22 / 3 | |
| 0.0.16 | 22 / 3 | |
| 0.0.15 | 22 / 3 | |
| 0.0.14 | 22 / 3 | |
| 0.0.13 | 22 / 3 | |
| 0.0.12 | 22 / 3 | |
| 0.0.11 | 22 / 3 | |
| 0.0.10 | 22 / 3 | |
| 0.0.9 | 22 / 3 | |
| 0.0.8 | 22 / 3 | |
| 0.0.7 | 22 / 3 | |
| 0.0.6 | 22 / 3 | |
| 0.0.5 | 19 / 3 | |
| 0.0.4 | 19 / 3 | |
| 0.0.3 | 19 / 3 | |
| 0.0.2 | 19 / 3 | |
| 0.0.1 | 19 / 3 |
v0.0.26
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.25
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.