@milaboratories/pl-middle-layer
Pl Middle Layer
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@milaboratories/pframes-node | AI (dependencies): Same-org sibling package, part of monorepo. | ai | |
| phantom-deps | phantom-dep:@milaboratories/pl-local | AI (phantom-deps): Same-org scope dependency, stable pattern. | ai | |
| dependencies | unvetted-dep:@milaboratories/pl-local | AI (dependencies): Same-org sibling package, part of monorepo. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Used indirectly via config; benign for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@milaboratories/pframes-rs-wasm | AI (phantom-deps): Same-org phantom dep, likely re-exported/used indirectly; consistent with other accepted phantom deps. | ai | |
| dependencies | unvetted-dep:@milaboratories/columns-collection-driver | AI (dependencies): First-party same-org dependency in a monorepo of tightly-coupled internal packages. | ai | |
| phantom-deps | phantom-dep:@milaboratories/pl-http | AI (phantom-deps): Same-org scoped package; likely re-exported or used indirectly. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@milaboratories/pl-config | AI (phantom-deps): Same-org scoped package; likely re-exported or used indirectly. Stable false positive for this package. | ai |
Versions (showing 51 of 590)
| Version | Deps | Published |
|---|---|---|
| 1.66.12 | 31 / 8 | |
| 1.66.11 | 31 / 8 | |
| 1.66.10 | 31 / 8 | |
| 1.66.9 | 31 / 8 | |
| 1.66.8 | 31 / 8 | |
| 1.66.7 | 31 / 8 | |
| 1.66.6 | 31 / 8 | |
| 1.66.5 | 31 / 8 | |
| 1.66.4 | 31 / 8 | |
| 1.66.3 | 31 / 8 | |
| 1.66.2 | 31 / 8 | |
| 1.66.1 | 31 / 8 | |
| 1.66.0 | 31 / 8 | |
| 1.65.9 | 30 / 8 | |
| 1.65.8 | 30 / 8 | |
| 1.65.7 | 30 / 8 | |
| 1.65.6 | 30 / 8 | |
| 1.65.5 | 30 / 8 | |
| 1.65.4 | 30 / 8 | |
| 1.65.3 | 30 / 8 | |
| 1.65.2 | 30 / 8 | |
| 1.65.1 | 30 / 8 | |
| 1.65.0 | 30 / 8 | |
| 1.64.42 | 30 / 8 | |
| 1.64.41 | 30 / 8 | |
| 1.64.40 | 30 / 8 | |
| 1.64.39 | 30 / 8 | |
| 1.64.38 | 30 / 8 | |
| 1.64.37 | 30 / 8 | |
| 1.64.36 | 30 / 8 | |
| 1.64.35 | 30 / 8 | |
| 1.64.34 | 30 / 8 | |
| 1.64.33 | 30 / 8 | |
| 1.64.32 | 30 / 8 | |
| 1.64.31 | 30 / 8 | |
| 1.64.30 | 30 / 8 | |
| 1.64.29 | 30 / 8 | |
| 1.64.28 | 30 / 8 | |
| 1.64.27 | 30 / 8 | |
| 1.64.26 | 30 / 8 | |
| 1.64.25 | 30 / 8 | |
| 1.64.24 | 30 / 8 | |
| 1.64.23 | 30 / 8 | |
| 1.64.22 | 30 / 8 | |
| 1.64.21 | 30 / 8 | |
| 1.64.20 | 30 / 8 | |
| 1.64.19 | 30 / 8 | |
| 1.64.18 | 30 / 8 | |
| 1.64.17 | 30 / 8 | |
| 1.64.16 | 30 / 8 | |
| 1.64.15 | 30 / 8 |
v1.66.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.42
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.41
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.40
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.39
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.38
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.