@murumets-ee/create
Project scaffolding — create-lumi CLI for bootstrapping new Lumi CMS projects.
51
Versions
Elastic-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ranx2k
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): No other risk signals; missing gitHead alone is insufficient to block a clean scaffold tool with no install scripts or suspicious changes. | ai | |
| phantom-deps | phantom-dep:tar | AI (phantom-deps): tar is a declared runtime dependency used for template archive handling. | ai | |
| phantom-deps | phantom-dep:picocolors | AI (phantom-deps): picocolors is a declared runtime dependency used for CLI output coloring. | ai | |
| phantom-deps | phantom-dep:@clack/prompts | AI (phantom-deps): Declared runtime dependency used for interactive CLI prompts. | ai |
Versions (showing 51 of 96)
| Version | Deps | Published |
|---|---|---|
| 0.36.0 | 3 / 5 | |
| 0.35.1 | 3 / 5 | |
| 0.35.0 | 3 / 5 | |
| 0.34.1 | 3 / 5 | |
| 0.34.0 | 3 / 5 | |
| 0.33.0 | 3 / 5 | |
| 0.32.3 | 3 / 5 | |
| 0.32.2 | 3 / 5 | |
| 0.32.1 | 3 / 5 | |
| 0.32.0 | 3 / 5 | |
| 0.31.0 | 3 / 5 | |
| 0.30.0 | 3 / 5 | |
| 0.29.2 | 3 / 5 | |
| 0.29.1 | 3 / 5 | |
| 0.29.0 | 3 / 5 | |
| 0.28.0 | 3 / 5 | |
| 0.27.0 | 3 / 5 | |
| 0.26.3 | 3 / 5 | |
| 0.26.2 | 3 / 5 | |
| 0.26.1 | 3 / 5 | |
| 0.26.0 | 3 / 5 | |
| 0.25.0 | 3 / 5 | |
| 0.24.1 | 3 / 5 | |
| 0.24.0 | 3 / 5 | |
| 0.23.2 | 3 / 5 | |
| 0.23.1 | 3 / 5 | |
| 0.23.0 | 3 / 5 | |
| 0.22.1 | 3 / 5 | |
| 0.22.0 | 3 / 5 | |
| 0.21.1 | 3 / 5 | |
| 0.21.0 | 3 / 5 | |
| 0.20.0 | 3 / 5 | |
| 0.19.0 | 3 / 5 | |
| 0.18.0 | 3 / 5 | |
| 0.17.1 | 3 / 5 | |
| 0.17.0 | 3 / 5 | |
| 0.16.5 | 3 / 5 | |
| 0.16.4 | 3 / 5 | |
| 0.16.3 | 3 / 5 | |
| 0.16.2 | 3 / 5 | |
| 0.16.1 | 3 / 5 | |
| 0.16.0 | 3 / 5 | |
| 0.15.4 | 3 / 5 | |
| 0.15.3 | 3 / 5 | |
| 0.15.2 | 3 / 5 | |
| 0.15.1 | 3 / 5 | |
| 0.15.0 | 3 / 5 | |
| 0.14.0 | 3 / 5 | |
| 0.13.3 | 3 / 5 | |
| 0.13.2 | 3 / 5 | |
| 0.13.1 | 3 / 5 |
v0.36.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.35.1
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.35.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.