@kosmojs/typebox-generator
27
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
sleewoo
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): Consistent across all @kosmojs/* packages; not a per-version risk signal. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): @kosmojs monorepo uses 0.0.0 versioning convention across all its packages; not a malware indicator here. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Internal scoped tooling package; missing description is consistent across the @kosmojs family. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Part of a scoped @kosmojs monorepo; sparse metadata is typical for internal tooling packages. | ai |
Versions (showing 27 of 27)
| Version | Deps | Published |
|---|---|---|
| 0.1.8 | 2 / 3 | |
| 0.1.7 | 2 / 3 | |
| 0.1.6 | 2 / 3 | |
| 0.1.2 | 0 / 5 | |
| 0.1.0 | 2 / 3 | |
| 0.0.30 | 2 / 3 | |
| 0.0.29 | 2 / 3 | |
| 0.0.28 | 1 / 4 | |
| 0.0.27 | 1 / 3 | |
| 0.0.25 | 2 / 2 | |
| 0.0.24 | 2 / 2 | |
| 0.0.23 | 2 / 2 | |
| 0.0.22 | 2 / 2 | |
| 0.0.21 | 1 / 3 | |
| 0.0.20 | 1 / 1 | |
| 0.0.11 | 1 / 3 | |
| 0.0.10 | 1 / 3 | |
| 0.0.9 | 1 / 3 | |
| 0.0.8 | 1 / 3 | |
| 0.0.7 | 1 / 3 | |
| 0.0.6 | 1 / 3 | |
| 0.0.5 | 1 / 3 | |
| 0.0.4 | 1 / 3 | |
| 0.0.3 | 1 / 3 | |
| 0.0.2 | 1 / 3 | |
| 0.0.1 | 1 / 3 | |
| 0.0.0 | 1 / 3 |