← Home

@mxpicture/gcp-functions-generator

npm Repository Homepage

Tools for google cloud functions

51
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

mxpicture

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@mxpicture/gcp-functions-backend AI (phantom-deps): Same-org scoped dep in a generator/scaffolding package; indirect usage (e.g., code generation targets) is expected and stable across versions. ai
phantom-deps phantom-dep:@mxpicture/gcp-functions-frontend AI (phantom-deps): Same-org scoped dep in a generator/scaffolding package; indirect usage (e.g., code generation targets) is expected and stable across versions. ai
phantom-deps phantom-dep:@types/micromatch AI (phantom-deps): @types/micromatch is a TypeScript type definition package listed as a runtime dep; this is a packaging style choice, not a security issue. Stable for this package. ai

Versions (showing 51 of 418)

View all versions
Version Deps Published
2.1.57 8 / 8
2.1.56 8 / 8
2.1.55 8 / 8
2.1.54 8 / 8
2.1.53 8 / 8
2.1.52 8 / 8
2.1.51 8 / 8
2.1.50 8 / 8
2.1.49 8 / 8
2.1.48 8 / 8
2.1.47 8 / 8
2.1.46 8 / 8
2.1.45 8 / 8
2.1.44 8 / 8
2.1.43 8 / 8
2.1.42 8 / 8
2.1.41 8 / 8
2.1.40 8 / 8
2.1.39 8 / 8
2.1.38 8 / 8
2.1.37 8 / 8
2.1.36 8 / 8
2.1.35 8 / 8
2.1.34 8 / 8
2.1.33 8 / 8
2.1.32 8 / 8
2.1.31 8 / 8
2.1.30 8 / 8
2.1.29 8 / 8
2.1.28 8 / 8
2.1.27 8 / 8
2.1.26 8 / 8
2.1.25 8 / 8
2.1.24 8 / 8
2.1.23 8 / 8
2.1.22 8 / 8
2.1.21 8 / 8
2.1.20 8 / 8
2.1.19 8 / 8
2.1.18 8 / 8
2.1.17 8 / 8
2.1.16 8 / 8
2.1.15 8 / 8
2.1.14 8 / 8
2.1.13 8 / 8
2.1.12 8 / 8
2.1.11 8 / 8
2.1.10 8 / 8
2.1.9 8 / 8
2.1.8 8 / 8
2.1.7 8 / 8

v2.1.57

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.56

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.55

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.54

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.53

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.