← Home

@liam-hq/cli

npm Repository Homepage
2
Versions
—
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures No source commit

Maintainers

mh4gfnoritakaikedasasamukujunkisai

Keywords

data-visualizationentity-relationship-diagramer-diagramerd

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:joi AI (typosquat): @liam-hq/cli is a scoped ER diagram CLI tool; Levenshtein match to 'joi' is a false positive with no brand similarity. ai
phantom-deps phantom-dep:ink AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:glob AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:react AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:valibot AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:inquirer AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:@swc/core AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:react-dom AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:neverthrow AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:yoctocolors AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:ink-gradient AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai
phantom-deps phantom-dep:@prisma/internals AI (phantom-deps): Bundled CLI via rollup; direct import detection is unreliable for bundled packages. ai

Versions (showing 2 of 2)

Version Deps Published
0.7.24 12 / 16
0.0.1 4 / 15

v0.0.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.