← Home

@live-change/db-admin

npm
100
Versions
ISC
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

m8

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@fortawesome/fontawesome-free AI (phantom-deps): Config-referenced UI dependency; stable pattern for this package. ai
dependencies unvetted-dep:prism-es6 AI (dependencies): Syntax highlighting library; no malicious indicators; stable dep in this UI admin package. ai
dependencies unvetted-dep:v-shared-element AI (dependencies): Vue shared element transition library; no malicious indicators; pinned version in a UI package. ai
npm-metadata no-description AI (npm-metadata): Long-lived package with 394 versions; missing description is a cosmetic issue. ai
bogus-package bogus-package AI (bogus-package): Frontend app package; missing description/keywords/repo URL is cosmetic, not indicative of malice given 394-version history. ai
phantom-deps phantom-dep:primeicons AI (phantom-deps): Icon font referenced in config; stable false positive. ai
phantom-deps phantom-dep:compression AI (phantom-deps): Server middleware referenced indirectly; stable false positive. ai
phantom-deps phantom-dep:@vueuse/core AI (phantom-deps): Frontend dep referenced in config; stable false positive. ai
phantom-deps phantom-dep:serve-static AI (phantom-deps): Server dep referenced indirectly; stable false positive. ai
phantom-deps phantom-dep:@live-change/dao AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:vue-prism-editor AI (phantom-deps): Frontend dep in config; stable false positive. ai
phantom-deps phantom-dep:codeceptjs-assert AI (phantom-deps): Test dep referenced in config; stable false positive. ai
semgrep semgrep:eval-usage AI (semgrep): eval used on internally-constructed code in a path parser; not user-controlled external input. ai
phantom-deps phantom-dep:tailwindcss-primeui AI (phantom-deps): CSS plugin in config; stable false positive. ai
phantom-deps phantom-dep:javascript-stringify AI (phantom-deps): Utility dep in config; stable false positive. ai
phantom-deps phantom-dep:serialize-javascript AI (phantom-deps): SSR utility in config; stable false positive. ai
phantom-deps phantom-dep:@live-change/dao-sockjs AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:@live-change/dao-message AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:@live-change/dao-websocket AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:rollup-plugin-node-builtins AI (phantom-deps): Build tool in config; stable false positive. ai
phantom-deps phantom-dep:vue3-scroll-border AI (phantom-deps): Frontend dep in config; stable false positive. ai
phantom-deps phantom-dep:prismjs AI (phantom-deps): CSS/config-referenced dep in a frontend package; stable false positive. ai
phantom-deps phantom-dep:cross-env AI (phantom-deps): Used in npm scripts only; phantom-dep false positive for this package. ai
phantom-deps phantom-dep:primeflex AI (phantom-deps): Frontend CSS framework referenced in config; stable false positive. ai
phantom-deps phantom-dep:prism-es6 AI (phantom-deps): Referenced in config files; stable false positive for this package. ai

Versions (showing 100 of 124)

Version Deps Published
0.9.216 29 / 12
0.9.215 29 / 12
0.9.214 29 / 12
0.9.213 29 / 12
0.9.212 29 / 12
0.9.209 32 / 12
0.9.205 32 / 12
0.9.204 32 / 12
0.9.203 32 / 12
0.9.201 32 / 12
0.9.200 32 / 12
0.9.199 32 / 12
0.9.198 32 / 12
0.9.197 32 / 12
0.9.196 32 / 12
0.9.195 32 / 12
0.9.194 32 / 12
0.9.193 32 / 12
0.9.191 32 / 12
0.9.190 32 / 12
0.9.189 32 / 12
0.9.188 32 / 12
0.9.186 32 / 12
0.9.185 32 / 12
0.9.184 32 / 12
0.9.183 32 / 12
0.9.182 32 / 12
0.9.181 32 / 12
0.9.180 32 / 12
0.9.179 32 / 12
0.9.177 32 / 12
0.9.176 32 / 12
0.9.175 32 / 12
0.9.174 32 / 12
0.9.173 32 / 12
0.9.171 32 / 12
0.9.169 32 / 12
0.9.167 32 / 12
0.9.166 32 / 12
0.9.165 32 / 12
0.9.164 32 / 12
0.9.163 32 / 12
0.9.162 32 / 12
0.9.161 32 / 12
0.9.160 32 / 12
0.9.159 32 / 12
0.9.158 32 / 12
0.9.157 32 / 12
0.9.156 32 / 12
0.9.155 32 / 12
0.9.154 32 / 12
0.9.153 32 / 12
0.9.152 32 / 12
0.9.151 32 / 12
0.9.150 32 / 12
0.9.148 32 / 12
0.9.147 32 / 12
0.9.146 32 / 12
0.9.145 32 / 12
0.9.144 32 / 12
0.9.143 32 / 12
0.9.142 32 / 12
0.9.141 32 / 12
0.9.140 32 / 12
0.9.138 32 / 12
0.9.137 32 / 12
0.9.136 32 / 12
0.9.135 32 / 12
0.9.134 32 / 12
0.9.133 32 / 12
0.9.132 32 / 12
0.9.131 32 / 12
0.9.130 32 / 12
0.9.129 32 / 12
0.9.128 32 / 12
0.9.127 32 / 12
0.9.126 32 / 12
0.9.124 32 / 12
0.9.123 32 / 12
0.9.122 32 / 12
0.9.121 32 / 12
0.9.119 32 / 12
0.9.118 32 / 12
0.9.117 32 / 12
0.9.116 32 / 12
0.9.115 32 / 12
0.9.114 32 / 12
0.9.113 32 / 12
0.9.111 32 / 12
0.9.110 32 / 12
0.9.109 32 / 12
0.9.108 32 / 12
0.9.107 32 / 12
0.9.106 32 / 12
0.9.105 32 / 12
0.9.104 32 / 12
0.9.103 32 / 12
0.9.102 32 / 12
0.9.101 32 / 12
0.9.100 32 / 12
Showing 100 of 124 Next page →

v0.9.216

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.215

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.214

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.213

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.212

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.