@murumets-ee/queue
Postgres-backed job queue — enqueue, poll, retry, dead letter, scheduled jobs, and worker lifecycle.
51
Versions
Elastic-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ranx2k
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/plugin-CLFQYDkZ.mjs | AI (source-diff): Minified ESM bundle from tsdown build; content is benign plugin config logic, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/client-BiPyowOs.mjs | AI (source-diff): Bundler-minified ESM chunk; content is readable queue client logic, no malicious patterns. | ai | |
| phantom-deps | phantom-dep:@murumets-ee/entity | AI (phantom-deps): Same-org monorepo dep; used transitively via bundled dist, not directly imported. | ai | |
| source-diff | obfuscated-file:dist/publish-0LlPEjK9.mjs | AI (source-diff): Bundler-minified ESM chunk; content is cron/schedule parsing logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/plugin-Bm9Xtoeg.mjs | AI (source-diff): Bundler-minified ESM chunk; content is readable plugin/alert logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/client-4Cs7KQC8.mjs | AI (source-diff): Standard tsdown/ESM bundle output; samples show queue client logic, no malicious patterns. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by new email-alert feature and additional bundled chunks; consistent with added deps. | ai | |
| source-diff | obfuscated-file:dist/publish-DbJyLqlZ.mjs | AI (source-diff): Standard tsdown/ESM bundle output; samples show cron/schedule utilities, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/plugin-BAEIELKb.mjs | AI (source-diff): Minified tsdown bundle output; content is readable queue plugin logic, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/client-DGuMqpVs.mjs | AI (source-diff): Standard tsdown/Vite chunked ESM bundle output; samples show readable queue client logic. | ai | |
| source-diff | obfuscated-file:dist/plugin-DH_L2vUi.mjs | AI (source-diff): Standard tsdown/Vite chunked ESM bundle output; samples show readable plugin/config logic. | ai | |
| phantom-deps | phantom-dep:@murumets-ee/mail | AI (phantom-deps): Same org-scoped dep used transitively via bundled dist; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/publish-DwRTZWJN.mjs | AI (source-diff): Standard tsdown/rollup bundler output; samples show readable cron/schedule logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/plugin-DJoWNImU.mjs | AI (source-diff): Standard tsdown/rollup bundler output; samples show readable plugin/config logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/client-BhpX1nlR.mjs | AI (source-diff): Standard tsdown/rollup bundler output; samples show readable queue client logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/admin.mjs | AI (source-diff): Standard tsdown/rollup bundler output; samples show readable queue admin logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/client.cjs | AI (source-diff): tsup-generated minified CJS bundle; content is readable cron/backoff logic, no malicious patterns. | ai | |
| phantom-deps | phantom-dep:@murumets-ee/logging | AI (phantom-deps): Same-org sibling package; likely used transitively or in build tooling rather than direct import. | ai | |
| source-diff | obfuscated-file:dist/index.cjs | AI (source-diff): tsup-generated minified CJS bundle; content is drizzle-orm schema definitions, no malicious patterns. | ai | |
| phantom-deps | phantom-dep:@murumets-ee/core | AI (phantom-deps): Same-org sibling package; likely used transitively or in build tooling rather than direct import. | ai | |
| source-diff | obfuscated-file:dist/worker.cjs | AI (source-diff): tsup-generated minified CJS bundle; content is readable cron/backoff logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/plugin.cjs | AI (source-diff): tsup-generated minified CJS bundle; content is drizzle-orm schema definitions, no malicious patterns. | ai |
Versions (showing 51 of 75)
| Version | Deps | Published |
|---|---|---|
| 0.36.0 | 7 / 5 | |
| 0.35.1 | 7 / 5 | |
| 0.35.0 | 7 / 5 | |
| 0.34.1 | 7 / 4 | |
| 0.34.0 | 7 / 4 | |
| 0.33.0 | 7 / 4 | |
| 0.32.3 | 7 / 4 | |
| 0.32.2 | 7 / 4 | |
| 0.32.1 | 7 / 4 | |
| 0.32.0 | 7 / 4 | |
| 0.31.0 | 7 / 4 | |
| 0.30.0 | 7 / 4 | |
| 0.29.2 | 7 / 4 | |
| 0.29.1 | 7 / 4 | |
| 0.29.0 | 7 / 4 | |
| 0.28.0 | 7 / 4 | |
| 0.27.0 | 6 / 4 | |
| 0.26.3 | 6 / 4 | |
| 0.26.2 | 6 / 4 | |
| 0.26.1 | 6 / 4 | |
| 0.26.0 | 6 / 4 | |
| 0.25.0 | 6 / 4 | |
| 0.24.1 | 6 / 4 | |
| 0.24.0 | 6 / 4 | |
| 0.23.2 | 6 / 4 | |
| 0.23.1 | 6 / 4 | |
| 0.23.0 | 6 / 4 | |
| 0.22.1 | 6 / 4 | |
| 0.22.0 | 6 / 4 | |
| 0.21.1 | 6 / 4 | |
| 0.21.0 | 6 / 4 | |
| 0.20.0 | 6 / 4 | |
| 0.19.0 | 6 / 4 | |
| 0.18.0 | 6 / 4 | |
| 0.17.1 | 6 / 4 | |
| 0.17.0 | 6 / 4 | |
| 0.16.5 | 6 / 4 | |
| 0.16.4 | 6 / 4 | |
| 0.16.3 | 6 / 4 | |
| 0.16.2 | 6 / 4 | |
| 0.16.1 | 6 / 4 | |
| 0.16.0 | 6 / 4 | |
| 0.15.4 | 6 / 4 | |
| 0.15.3 | 6 / 4 | |
| 0.15.2 | 6 / 4 | |
| 0.15.1 | 6 / 4 | |
| 0.15.0 | 6 / 4 | |
| 0.14.0 | 6 / 4 | |
| 0.13.3 | 6 / 4 | |
| 0.13.2 | 6 / 4 | |
| 0.13.1 | 6 / 4 |
v0.36.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.35.1
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.35.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.