@liflig/cdk
CDK library for Liflig
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:lib/rds/windows.js | AI (source-diff): Readable compiled TypeScript utility; long lines from string concatenation in error messages, not obfuscation. | ai | |
| source-diff | obfuscated-file:lib/alarms/queue-alarms.js | AI (source-diff): File is readable TypeScript-compiled JS; long lines are from inline JSDoc/type annotations, not obfuscation. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Used in Basic Auth authorizer to decode HTTP Authorization header credentials — standard, expected pattern for this package. | ai |
Versions (showing 100 of 237)
| Version | Deps | Published |
|---|---|---|
| 3.27.33 | 2 / 31 | |
| 3.27.32 | 2 / 31 | |
| 3.27.31 | 2 / 31 | |
| 3.27.30 | 2 / 31 | |
| 3.27.29 | 2 / 31 | |
| 3.27.28 | 2 / 31 | |
| 3.27.27 | 2 / 31 | |
| 3.27.26 | 2 / 31 | |
| 3.27.25 | 2 / 31 | |
| 3.27.24 | 2 / 31 | |
| 3.27.23 | 2 / 31 | |
| 3.27.22 | 2 / 31 | |
| 3.27.21 | 2 / 31 | |
| 3.27.20 | 2 / 31 | |
| 3.27.19 | 2 / 31 | |
| 3.27.18 | 2 / 31 | |
| 3.27.17 | 2 / 31 | |
| 3.27.16 | 2 / 31 | |
| 3.27.15 | 2 / 31 | |
| 3.27.14 | 2 / 31 | |
| 3.27.13 | 2 / 31 | |
| 3.27.12 | 2 / 31 | |
| 3.27.11 | 2 / 31 | |
| 3.27.10 | 2 / 31 | |
| 3.27.9 | 2 / 31 | |
| 3.27.8 | 2 / 31 | |
| 3.27.7 | 2 / 31 | |
| 3.27.6 | 2 / 31 | |
| 3.27.5 | 2 / 31 | |
| 3.27.4 | 2 / 31 | |
| 3.27.3 | 2 / 31 | |
| 3.27.2 | 2 / 31 | |
| 3.27.1 | 2 / 31 | |
| 3.27.0 | 2 / 31 | |
| 3.26.23 | 2 / 31 | |
| 3.26.22 | 2 / 31 | |
| 3.26.21 | 2 / 31 | |
| 3.26.20 | 2 / 31 | |
| 3.26.19 | 2 / 31 | |
| 3.26.18 | 2 / 31 | |
| 3.26.17 | 2 / 31 | |
| 3.26.16 | 2 / 31 | |
| 3.26.15 | 2 / 31 | |
| 3.26.14 | 2 / 31 | |
| 3.26.13 | 2 / 31 | |
| 3.26.12 | 2 / 31 | |
| 3.26.11 | 2 / 31 | |
| 3.26.10 | 2 / 31 | |
| 3.26.9 | 2 / 31 | |
| 3.26.8 | 2 / 31 | |
| 3.26.7 | 2 / 31 | |
| 3.26.6 | 2 / 31 | |
| 3.26.5 | 2 / 31 | |
| 3.26.4 | 2 / 31 | |
| 3.26.3 | 2 / 31 | |
| 3.26.2 | 2 / 31 | |
| 3.26.1 | 2 / 31 | |
| 3.26.0 | 2 / 31 | |
| 3.25.2 | 2 / 31 | |
| 3.25.1 | 2 / 31 | |
| 3.25.0 | 2 / 31 | |
| 3.24.5 | 2 / 31 | |
| 3.24.4 | 2 / 31 | |
| 3.24.3 | 2 / 31 | |
| 3.24.2 | 2 / 31 | |
| 3.24.1 | 2 / 31 | |
| 3.24.0 | 2 / 31 | |
| 3.23.2 | 2 / 31 | |
| 3.23.1 | 2 / 31 | |
| 3.23.0 | 2 / 31 | |
| 3.22.19 | 2 / 31 | |
| 3.22.18 | 2 / 31 | |
| 3.22.17 | 2 / 31 | |
| 3.22.16 | 2 / 31 | |
| 3.22.15 | 2 / 31 | |
| 3.22.14 | 2 / 31 | |
| 3.22.13 | 2 / 31 | |
| 3.22.12 | 2 / 31 | |
| 3.22.11 | 2 / 31 | |
| 3.22.10 | 2 / 31 | |
| 3.22.9 | 2 / 31 | |
| 3.22.8 | 2 / 31 | |
| 3.22.7 | 2 / 31 | |
| 3.22.6 | 2 / 31 | |
| 3.22.5 | 2 / 31 | |
| 3.22.4 | 2 / 31 | |
| 3.22.3 | 2 / 31 | |
| 3.22.2 | 2 / 31 | |
| 3.22.1 | 2 / 31 | |
| 3.22.0 | 2 / 31 | |
| 3.21.0 | 2 / 31 | |
| 3.20.24 | 2 / 31 | |
| 3.20.23 | 2 / 31 | |
| 3.20.22 | 2 / 31 | |
| 3.20.21 | 2 / 31 | |
| 3.20.20 | 2 / 31 | |
| 3.20.19 | 2 / 31 | |
| 3.20.18 | 2 / 31 | |
| 3.20.17 | 2 / 31 | |
| 3.20.16 | 2 / 31 |
v3.27.33
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.32
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.31
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.30
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.29
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.28
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.27
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.26
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.25
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.24
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.23
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.27.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.