@ngaf/licensing
10
Versions
MIT
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
blove
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:env-spread | AI (semgrep): Fires in a test file to snapshot/restore process.env; not a secret-capture risk. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Key-parsing utility decoding user-supplied ed25519 key material; expected cryptographic pattern. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Same key-parsing utility; base64 is an alternative encoding for the same 32-byte key input. | ai |