@mapbox/geojsonhint
validate and sanity-check geojson files
11
Versions
ISC
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
mbx-npm-ci-productionmbx-npm-ci-stagingmbx-npm-advanced-actions-productionmbx-npm-advanced-actions-stagingmbx-npm-09-productionmbx-npm-08-productionmbx-npm-07-productionmbx-npm-06-productionmbx-npm-05-productionmbx-npm-04-productionmbx-npm-03-productionmbx-npm-02-productionmbx-npm-01-productionmbx-npm-02-stagingmapbox-npm-01mapbox-npm-02mapbox-npm-07mapbox-npm-03mapbox-npm-04mapbox-npm-09mapbox-npm-05mapbox-npm-06mapbox-npm-08mapbox-npm-advanced-actionsmapbox-npm-cimapbox-npmmapbox-adminmapbox-machine-user
Keywords
geojsonhint
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-takeover | AI (maintainer-change): The 'takeover' reflects Mapbox org adding their full employee roster as maintainers on their scoped package — a known org management pattern, not a hostile takeover. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Original author tmcw transferred the package to Mapbox org; ingalls (publisher) has a strong track record of 100 approved packages. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Mass addition of Mapbox employees is consistent with org-level npm maintainer management for @mapbox scoped packages. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher change from mapbox-npm-02 to mapbox-npm-07 occurred in 2019 and is a routine Mapbox internal account rotation. mapbox-npm-07 has a strong track record (72 approved packages). | ai | |
| phantom-deps | phantom-dep:vfile | AI (phantom-deps): vfile is used in the CLI bin script, not the main library entry point. This is a legitimate usage pattern for CLI tooling. | ai | |
| phantom-deps | phantom-dep:vfile-reporter | AI (phantom-deps): vfile-reporter is used in the CLI bin script, not the main library entry point. This is a legitimate usage pattern for CLI tooling. | ai | |
| phantom-deps | phantom-dep:minimist | AI (phantom-deps): minimist is a standard CLI argument parser used in the bin script; phantom-dep detection may not trace CLI usage paths correctly. | ai | |
| phantom-deps | phantom-dep:text-table | AI (phantom-deps): text-table is used in the CLI bin script for formatted output; phantom-dep detection may not trace CLI usage paths correctly. | ai | |
| phantom-deps | phantom-dep:concat-stream | AI (phantom-deps): concat-stream is used in the CLI bin script for stdin handling; phantom-dep detection may not trace CLI usage paths correctly. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): chalk is used in the CLI bin script for colored output; phantom-dep detection may not trace CLI usage paths correctly for this package. | ai |