@kitschpatrol/mdat-config

MDAT configuration for @kitschpatrol/shared-config.

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

kitschpatrol

Keywords

shared-configmdat-configmarkdownreadmemdatclikscksc-mdat

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
dependencies	unvetted-dep:mdat	AI (dependencies): mdat is the core tool this config package wraps; its presence as a dependency is expected and stable across versions.	ai	2026/05/23
provenance	no-provenance	AI (provenance): Established package with consistent publish history; lack of provenance is common and not a risk indicator here.	ai	2026/05/11
publish-pattern	dormant-publish	AI (publish-pattern): Publisher has prior approved package; no material changes from last version; config wrapper in a known monorepo.	ai	2026/05/11
phantom-deps	phantom-dep:prettier	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:deepmerge	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:decircular	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:package-up	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:picocolors	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:execa	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:find-workspaces	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:@pinojs/json-colorizer	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:cosmiconfig-typescript-loader	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:json-stringify-pretty-compact	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:cosmiconfig	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:yargs	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30
phantom-deps	phantom-dep:fs-extra	AI (phantom-deps): Config package re-exports deps for consumers; phantom-dep false positive pattern stable across versions.	ai	2026/04/30