@lytjs/common
Lyt.js 公共工具库 - 类型检查、对象操作、事件发射器、订阅管理等基础工具
19
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
idcu
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@lytjs/common-string | AI (dependencies): workspace:* sibling in the same @lytjs monorepo; not a third-party dependency. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): All new deps are workspace:* siblings in the @lytjs monorepo; aggregate barrel package pattern. | ai | |
| phantom-deps | phantom-dep:@lytjs/common-warn | AI (phantom-deps): Same-org workspace sibling; phantom-dep heuristic unreliable for monorepo re-exports. | ai |