← Home

@md-oss/common

25
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

ariastarcos

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/files-m1nnj5gT.cjs AI (source-diff): Minified build output from pkgroll --minify; content is readable utility code, not obfuscated malware. ai
source-diff obfuscated-file:dist/mime-types-C-tDBZvq.cjs AI (source-diff): pkgroll --minify build output; content is plainly readable MIME type utility code. ai
source-diff obfuscated-file:dist/time-DkBDtKxD.cjs AI (source-diff): pkgroll --minify build output; content is plainly readable time utility code. ai
source-diff obfuscated-file:dist/time-QXDDRoSp.mjs AI (source-diff): pkgroll --minify build output; ESM variant of the same time utility code. ai
source-diff obfuscated-file:dist/time-QFOOZPPZ.cjs AI (source-diff): Minified by pkgroll --minify build step; content is benign time-utility code. ai
source-diff obfuscated-file:dist/time-C0Dxy-di.mjs AI (source-diff): Minified by pkgroll --minify build step; content is benign time-utility code. ai
phantom-deps phantom-dep:@md-oss/config AI (phantom-deps): Same-org sibling package; likely used transitively or by convention within the monorepo. ai
phantom-deps phantom-dep:@types/qs AI (phantom-deps): @types/qs is explicitly declared as a runtime dependency alongside qs; phantom-dep heuristic is a false positive here. ai

Versions (showing 25 of 25)

Version Deps Published
0.10.0 5 / 5
0.9.0 4 / 4
0.8.3 4 / 4
0.7.1 4 / 4
0.6.0 4 / 4
0.5.3 5 / 3
0.5.2 5 / 3
0.5.1 5 / 3
0.5.0 5 / 3
0.3.9 5 / 3
0.3.8 5 / 3
0.3.6 5 / 3
0.3.5 5 / 3
0.3.4 5 / 3
0.3.3 5 / 3
0.3.2 5 / 3
0.2.4 4 / 3
0.2.3 4 / 3
0.2.2 4 / 3
0.2.0 4 / 3
0.1.7 4 / 3
0.1.6 4 / 3
0.1.5 4 / 3
0.1.2 4 / 3
0.1.0 4 / 3