@nocobase/devtools
<video width="100%" controls> <source src="https://github.com/user-attachments/assets/4d11a87b-00e2-48f3-9bf7-389d21072d13" type="video/mp4"> </video>
59
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
chenosjiannlu
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@rsbuild/plugin-react | AI (phantom-deps): Build tooling dep referenced in config files; expected pattern for this devtools package. | ai | |
| phantom-deps | phantom-dep:@rsbuild/plugin-svgr | AI (phantom-deps): Build tooling dep referenced in config files; expected pattern for this devtools package. | ai | |
| phantom-deps | phantom-dep:@rsbuild/plugin-less | AI (phantom-deps): Build tooling dep referenced in config files; expected pattern for this devtools package. | ai | |
| phantom-deps | phantom-dep:@rsbuild/core | AI (phantom-deps): Build tooling dep referenced in config files; expected pattern for this devtools package. | ai | |
| phantom-deps | phantom-dep:@umijs/utils | AI (phantom-deps): Devtools config-only package; deps referenced in config files by convention, not direct imports. | ai | |
| phantom-deps | phantom-dep:@rsbuild/plugin-node-polyfill | AI (phantom-deps): Build tooling dep referenced in config files; expected pattern for this devtools package. | ai | |
| phantom-deps | phantom-dep:@typescript-eslint/eslint-plugin | AI (phantom-deps): TS ESLint plugin referenced in config; expected pattern for devtools aggregator. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-react-hooks | AI (phantom-deps): ESLint plugin referenced in config; expected pattern for devtools aggregator. | ai | |
| phantom-deps | phantom-dep:@typescript-eslint/parser | AI (phantom-deps): TS ESLint parser referenced in config; expected pattern for devtools aggregator. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-markdown | AI (phantom-deps): ESLint plugin referenced in config; expected pattern for devtools aggregator. | ai | |
| dependencies | unvetted-dep:@types/koa-bodyparser | AI (dependencies): Type-only dev dependency; no runtime risk for this devtools package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-node | AI (phantom-deps): ESLint plugin referenced in config; expected pattern for devtools aggregator. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-react | AI (phantom-deps): ESLint plugin referenced in config; expected pattern for devtools aggregator. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-import | AI (phantom-deps): ESLint plugin referenced in config; expected pattern for devtools aggregator. | ai | |
| phantom-deps | phantom-dep:@types/koa-bodyparser | AI (phantom-deps): Type-only dep loaded by convention; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-promise | AI (phantom-deps): ESLint plugin referenced in config; expected pattern for devtools aggregator. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-prettier | AI (phantom-deps): ESLint plugin referenced in config; expected pattern for devtools aggregator. | ai | |
| phantom-deps | phantom-dep:eslint-config-prettier | AI (phantom-deps): ESLint config referenced in config; expected pattern for devtools aggregator. | ai | |
| phantom-deps | phantom-dep:@nocobase/client | AI (phantom-deps): Same-org package; stable false positive for this devtools aggregator. | ai | |
| phantom-deps | phantom-dep:@types/react-dom | AI (phantom-deps): Type-only package; convention-loaded, stable false positive. | ai | |
| phantom-deps | phantom-dep:pretty-format | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:pretty-quick | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:serve | AI (phantom-deps): Devtools aggregator; deps referenced in config files, not direct imports — stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:rimraf | AI (phantom-deps): Devtools aggregator; config-file reference pattern, not a real phantom dep. | ai | |
| phantom-deps | phantom-dep:ts-node | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:cross-env | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:tinybench | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:ts-loader | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:@types/koa | AI (phantom-deps): Type-only package; convention-loaded, stable false positive. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): Type-only package; convention-loaded, stable false positive. | ai | |
| phantom-deps | phantom-dep:ts-node-dev | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Type-only package; convention-loaded, stable false positive. | ai | |
| phantom-deps | phantom-dep:concurrently | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:@types/lodash | AI (phantom-deps): Type-only package; convention-loaded, stable false positive. | ai | |
| phantom-deps | phantom-dep:@nocobase/test | AI (phantom-deps): Same-org package; stable false positive for this devtools aggregator. | ai | |
| phantom-deps | phantom-dep:tsconfig-paths | AI (phantom-deps): Devtools aggregator; config-file reference pattern. | ai | |
| phantom-deps | phantom-dep:@nocobase/build | AI (phantom-deps): Same-org package; stable false positive for this devtools aggregator. | ai | |
| phantom-deps | phantom-dep:tsx | AI (phantom-deps): Devtools aggregator package; all phantom deps are CLI/config tools declared for monorepo consumers, not directly imported. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): Devtools aggregator; react declared for monorepo consumers, not directly imported. Expected pattern. | ai | |
| phantom-deps | phantom-dep:prettier | AI (phantom-deps): Devtools aggregator; prettier consumed via CLI/config. Expected pattern. | ai | |
| phantom-deps | phantom-dep:typescript | AI (phantom-deps): Devtools aggregator; typescript consumed via CLI/config. Expected pattern. | ai | |
| phantom-deps | phantom-dep:eslint | AI (phantom-deps): Devtools aggregator; eslint consumed via config/CLI, not direct import. Expected pattern. | ai | |
| phantom-deps | phantom-dep:lerna | AI (phantom-deps): Devtools aggregator; lerna is a CLI tool declared as dep for monorepo consumers. Expected pattern. | ai | |
| phantom-deps | phantom-dep:umi | AI (phantom-deps): Devtools aggregator package; umi is a declared dep consumed via CLI/config, not direct JS import. Expected pattern. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Dynamic require loads plugin package.json files discovered via glob path — standard plugin discovery pattern, not arbitrary code execution. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): The raw IP is 127.0.0.1 (localhost) used as a dev proxy target in umiConfig.js — completely benign for a devtools package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Devtools aggregator whose value is transitive deps; empty main and link-heavy README are consistent with this pattern for @nocobase/devtools. | ai |
Versions (showing 59 of 159)
| Version | Deps | Published |
|---|---|---|
| 1.9.58 | 39 / 0 | |
| 1.9.57 | 39 / 0 | |
| 1.9.56 | 39 / 0 | |
| 1.9.55 | 39 / 0 | |
| 1.9.54 | 39 / 0 | |
| 1.9.53 | 39 / 0 | |
| 1.9.52 | 39 / 0 | |
| 1.9.51 | 39 / 0 | |
| 1.9.49 | 39 / 0 | |
| 1.9.47 | 39 / 0 | |
| 1.9.46 | 39 / 0 | |
| 1.9.45 | 39 / 0 | |
| 1.9.44 | 39 / 0 | |
| 1.9.43 | 39 / 0 | |
| 1.9.42 | 39 / 0 | |
| 1.9.41 | 39 / 0 | |
| 1.9.40 | 39 / 0 | |
| 1.9.39 | 39 / 0 | |
| 1.9.38 | 39 / 0 | |
| 1.9.37 | 39 / 0 | |
| 1.9.36 | 39 / 0 | |
| 1.9.35 | 39 / 0 | |
| 1.9.34 | 39 / 0 | |
| 1.9.33 | 39 / 0 | |
| 1.9.32 | 39 / 0 | |
| 1.9.31 | 39 / 0 | |
| 1.9.30 | 39 / 0 | |
| 1.9.29 | 39 / 0 | |
| 1.9.28 | 39 / 0 | |
| 1.9.27 | 39 / 0 | |
| 1.9.26 | 39 / 0 | |
| 1.9.25 | 39 / 0 | |
| 1.9.24 | 39 / 0 | |
| 1.9.23 | 39 / 0 | |
| 1.9.22 | 39 / 0 | |
| 1.9.21 | 39 / 0 | |
| 1.9.20 | 39 / 0 | |
| 1.9.19 | 39 / 0 | |
| 1.9.18 | 39 / 0 | |
| 1.9.17 | 39 / 0 | |
| 1.9.16 | 39 / 0 | |
| 1.9.15 | 39 / 0 | |
| 1.9.14 | 39 / 0 | |
| 1.9.13 | 39 / 0 | |
| 1.9.12 | 39 / 0 | |
| 1.9.11 | 39 / 0 | |
| 1.9.10 | 39 / 0 | |
| 1.9.9 | 39 / 0 | |
| 1.9.8 | 39 / 0 | |
| 1.9.7 | 39 / 0 | |
| 1.9.6 | 39 / 0 | |
| 1.9.5 | 39 / 0 | |
| 1.9.4 | 39 / 0 | |
| 1.9.3 | 39 / 0 | |
| 1.9.2 | 39 / 0 | |
| 1.9.1 | 39 / 0 | |
| 1.9.0 | 39 / 0 | |
| 1.8.33 | 39 / 0 | |
| 1.8.32 | 39 / 0 |