← Home

@lightdash/warehouses

npm Repository Homepage

Warehouse connectors for Lightdash

51
Versions
MIT
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures No source commit

Maintainers

ligthdash_javierjose-lightdashowlaslight-irakli

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern new-deps-added AI (publish-pattern): New deps are official @aws-sdk packages matching the warehouse connector's documented Redshift support. ai
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing; SLSA provenance attestation confirms integrity. Stable pattern for this package. ai
dependencies unvetted-dep:@duckdb/node-api AI (dependencies): @duckdb/node-api is the official DuckDB Node.js API; legitimate dependency for a warehouse connector package. ai
bogus-package bogus-package AI (bogus-package): Internal monorepo package; sparse README and no keywords are expected for workspace sub-packages. ai
phantom-deps phantom-dep:lodash AI (phantom-deps): lodash is a declared runtime dependency; phantom-dep heuristic is a false positive here. ai

Versions (showing 51 of 5218)

View all versions
Version Deps Published
1.13.0 17 / 9
1.12.0 17 / 9
1.11.0 17 / 9
1.10.0 17 / 9
1.9.0 17 / 9
1.8.0 17 / 9
1.7.1 17 / 9
1.7.0 17 / 9
1.6.0 17 / 9
1.5.1 17 / 9
1.5.0 18 / 9
1.4.1 18 / 9
1.4.0 18 / 9
1.3.0 18 / 9
1.2.0 18 / 9
0.3371.0 18 / 9
0.3221.0 17 / 7
0.3149.0 15 / 7
0.3146.0 15 / 7
0.3133.0 15 / 7
0.3077.0 15 / 6
0.3045.0 15 / 6
0.3044.0 15 / 6
0.3009.0 15 / 6
0.3008.0 15 / 6
0.2984.2 15 / 6
0.2984.1 15 / 6
0.2984.0 15 / 6
0.2960.2 15 / 6
0.2960.1 15 / 6
0.2924.0 15 / 6
0.2919.0 15 / 6
0.2917.1 15 / 6
0.2913.0 15 / 6
0.2912.0 15 / 6
0.2907.2 15 / 6
0.2907.1 15 / 6
0.2907.0 15 / 6
0.2905.0 15 / 6
0.2904.4 15 / 6
0.2904.2 15 / 6
0.2903.9 15 / 6
0.2903.7 15 / 6
0.2903.0 15 / 6
0.2864.3 15 / 6
0.2864.0 15 / 6
0.2863.0 15 / 6
0.2848.0 15 / 6
0.2847.0 15 / 6
0.2838.0 15 / 6
0.2783.0 15 / 6

v1.13.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.12.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.11.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.10.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.9.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.8.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.7.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.7.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.6.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.5.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.5.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.2.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3371.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.