@lightdash/common
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:company-email-validator | AI (dependencies): Legitimate replacement for free-email-domains; company email validation is the package's stated purpose and the swap is functionally coherent. | ai | |
| dependencies | unvetted-dep:free-email-domains | AI (dependencies): free-email-domains is a benign, widely-used utility; addition is contextually appropriate for this BI package. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New dep (free-email-domains) is a well-known utility with no malicious indicators; not an attack vector. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Actively developed monorepo common package; large file additions are routine across its 6000+ version history. | ai | |
| dependencies | unvetted-dep:handlebars | AI (dependencies): Handlebars is a well-known templating library; its use in @lightdash/common is stable and intentional across versions. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Scoped monorepo package; missing description is a stable characteristic, not a malware signal. | ai | |
| phantom-deps | phantom-dep:@types/lodash | AI (phantom-deps): @types/lodash is a type declaration package legitimately listed as a runtime dep in this monorepo common package; stable false positive. | ai |
Versions (showing 100 of 3932)
| Version | Deps | Published |
|---|---|---|
| 0.3340.0 | 30 / 8 | |
| 0.3339.0 | 30 / 8 | |
| 0.3337.1 | 30 / 8 | |
| 0.3337.0 | 30 / 8 | |
| 0.3336.0 | 30 / 8 | |
| 0.3335.1 | 30 / 8 | |
| 0.3335.0 | 30 / 8 | |
| 0.3334.2 | 30 / 8 | |
| 0.3334.1 | 30 / 8 | |
| 0.3334.0 | 30 / 8 | |
| 0.3332.0 | 30 / 8 | |
| 0.3331.0 | 30 / 8 | |
| 0.3330.0 | 30 / 8 | |
| 0.3329.0 | 30 / 8 | |
| 0.3328.5 | 30 / 8 | |
| 0.3328.4 | 30 / 8 | |
| 0.3328.2 | 30 / 8 | |
| 0.3190.2 | 30 / 7 | |
| 0.3187.1 | 30 / 7 | |
| 0.3184.0 | 30 / 7 | |
| 0.3182.0 | 29 / 7 | |
| 0.3146.0 | 27 / 7 | |
| 0.3046.1 | 27 / 6 | |
| 0.3045.0 | 26 / 6 | |
| 0.3019.2 | 26 / 6 | |
| 0.3009.0 | 26 / 6 | |
| 0.3008.0 | 26 / 6 | |
| 0.2984.2 | 26 / 6 | |
| 0.2984.0 | 26 / 6 | |
| 0.2961.0 | 26 / 6 | |
| 0.2960.2 | 26 / 6 | |
| 0.2932.0 | 26 / 6 | |
| 0.2924.2 | 26 / 6 | |
| 0.2885.0 | 26 / 6 | |
| 0.2864.6 | 26 / 6 | |
| 0.2864.4 | 26 / 6 | |
| 0.2864.2 | 26 / 6 | |
| 0.2860.0 | 26 / 6 | |
| 0.2851.1 | 26 / 6 | |
| 0.2850.0 | 26 / 6 | |
| 0.2848.0 | 26 / 6 | |
| 0.2847.0 | 26 / 6 | |
| 0.2838.0 | 26 / 6 | |
| 0.2403.1 | 25 / 5 | |
| 0.2403.0 | 25 / 5 | |
| 0.2402.0 | 25 / 5 | |
| 0.2401.0 | 25 / 5 | |
| 0.2400.0 | 25 / 5 | |
| 0.2399.3 | 25 / 5 | |
| 0.2399.2 | 25 / 5 | |
| 0.2399.1 | 25 / 5 | |
| 0.2399.0 | 25 / 5 | |
| 0.2398.0 | 25 / 5 | |
| 0.2397.1 | 25 / 5 | |
| 0.2397.0 | 25 / 5 | |
| 0.2396.0 | 25 / 5 | |
| 0.2395.0 | 25 / 5 | |
| 0.2394.2 | 25 / 5 | |
| 0.2394.1 | 25 / 5 | |
| 0.2394.0 | 25 / 5 | |
| 0.2393.0 | 25 / 5 | |
| 0.2392.0 | 25 / 5 | |
| 0.2391.0 | 25 / 5 | |
| 0.2390.0 | 25 / 5 | |
| 0.2389.4 | 25 / 5 | |
| 0.2389.3 | 25 / 5 | |
| 0.2389.2 | 25 / 5 | |
| 0.2389.1 | 25 / 5 | |
| 0.2389.0 | 25 / 5 | |
| 0.2388.1 | 25 / 5 | |
| 0.2388.0 | 25 / 5 | |
| 0.2387.1 | 25 / 5 | |
| 0.2387.0 | 25 / 5 | |
| 0.2386.0 | 25 / 5 | |
| 0.2385.1 | 25 / 5 | |
| 0.2385.0 | 25 / 5 | |
| 0.2384.0 | 25 / 5 | |
| 0.2383.0 | 25 / 5 | |
| 0.2382.1 | 25 / 5 | |
| 0.2382.0 | 25 / 5 | |
| 0.2381.0 | 25 / 5 | |
| 0.2380.1 | 25 / 5 | |
| 0.2380.0 | 25 / 5 | |
| 0.2379.0 | 25 / 5 | |
| 0.2378.2 | 25 / 5 | |
| 0.2378.1 | 25 / 5 | |
| 0.2378.0 | 25 / 5 | |
| 0.2377.0 | 25 / 5 | |
| 0.2376.0 | 25 / 5 | |
| 0.2375.0 | 25 / 5 | |
| 0.2374.2 | 25 / 5 | |
| 0.2374.1 | 25 / 5 | |
| 0.2374.0 | 25 / 5 | |
| 0.2373.0 | 25 / 5 | |
| 0.2372.3 | 25 / 5 | |
| 0.2372.2 | 25 / 5 | |
| 0.2372.1 | 25 / 5 | |
| 0.2372.0 | 25 / 5 | |
| 0.2371.0 | 25 / 5 | |
| 0.2370.2 | 25 / 5 |
v0.3340.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3339.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3337.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3337.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3336.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3335.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3335.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3334.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3334.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3334.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3332.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3331.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3330.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3329.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3328.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3328.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3328.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3184.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2403.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2403.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2402.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2401.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2400.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2399.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2399.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2399.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2399.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2398.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2397.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2397.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2396.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2395.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2394.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2394.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2394.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2393.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2392.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2391.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2390.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2389.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2389.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2389.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2389.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2389.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2388.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2388.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2387.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2387.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2386.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2385.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2385.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2384.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2383.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2382.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2382.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2381.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2380.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2380.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2379.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2378.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2378.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2378.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2377.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2376.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2375.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2374.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2374.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2374.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2373.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2372.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2372.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2372.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2372.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2371.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.2370.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.