@kb-labs/plugin-execution-factory
Execution backend factory for KB Labs plugins - extracted to break circular dependencies
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): Package lacks CI/CD provenance but has no other risk signals; stable false-positive for this package. | ai |
Versions (showing 24 of 24)
| Version | Deps | Published |
|---|---|---|
| 2.107.0 | 6 / 8 | |
| 2.106.0 | 6 / 8 | |
| 2.105.0 | 6 / 8 | |
| 2.104.0 | 6 / 8 | |
| 2.103.0 | 6 / 8 | |
| 2.102.0 | 6 / 8 | |
| 2.101.0 | 6 / 8 | |
| 2.100.0 | 6 / 8 | |
| 2.98.0 | 6 / 8 | |
| 2.96.0 | 6 / 8 | |
| 2.94.0 | 6 / 8 | |
| 2.93.0 | 6 / 8 | |
| 2.89.0 | 6 / 8 | |
| 2.17.0 | 6 / 8 | |
| 2.14.0 | 5 / 8 | |
| 2.11.0 | 5 / 8 | |
| 2.10.0 | 5 / 8 | |
| 2.9.0 | 5 / 8 | |
| 2.6.0 | 5 / 8 | |
| 1.4.0 | 5 / 8 | |
| 1.3.0 | 5 / 8 | |
| 1.2.0 | 5 / 8 | |
| 1.1.0 | 5 / 8 | |
| 1.0.0 | 5 / 6 |
v2.107.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.106.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.105.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.104.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.103.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.102.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.101.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.100.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.98.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.96.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.