@nocobase/plugin-data-source-manager
Manage data sources, including the built-in Master database, external databases, APIs, etc.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/client/674.1325c3cafd7d0f6a.js | AI (source-diff): Standard webpack minified client bundle with NocoBase copyright header; expected artifact for this plugin package. | ai | |
| source-diff | obfuscated-file:dist/node_modules/zod/index.cjs | AI (source-diff): File is a standard minified/bundled CJS build of the well-known 'zod' schema validation library. The sample shows recognizable webpack bundle patterns, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/client/10.dbc11c4479ec0262.js | AI (source-diff): Standard webpack minified bundle chunk for NocoBase plugin; not obfuscated malware. This pattern is consistent across all NocoBase plugin releases. | ai | |
| source-diff | obfuscated-file:dist/client/236.f7fbbbeb687fdeac.js | AI (source-diff): Standard webpack minified bundle chunk for NocoBase plugin; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/client/296.255678bb116011b8.js | AI (source-diff): Standard webpack minified bundle chunk for NocoBase plugin; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/client/398.24f81afefe0fcbc3.js | AI (source-diff): Standard webpack minified bundle chunk for NocoBase plugin; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/client/65.3859ac7ded866603.js | AI (source-diff): Standard webpack minified bundle chunk for NocoBase plugin; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/client/674.fc041eca1d68ccaa.js | AI (source-diff): Standard webpack minified bundle chunk for NocoBase plugin; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/client/843.f47754f6f7d3351e.js | AI (source-diff): Standard webpack minified bundle chunk for NocoBase plugin; not obfuscated malware. | ai | |
| provenance | no-provenance | AI (provenance): NocoBase does not publish with Sigstore provenance; this is consistent across all their packages and not a security risk given the established publisher track record. | ai | |
| source-diff | obfuscated-file:dist/client/631010d076ddc96c.js | AI (source-diff): Standard webpack-minified React component bundle with NocoBase copyright header. Long lines are webpack output, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/client/06cc524d8b28f5a5.js | AI (source-diff): Standard webpack-minified React component bundle with NocoBase copyright header. Long lines are webpack output, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/client/74f53ee2725f3d0d.js | AI (source-diff): Standard webpack-minified React component bundle with NocoBase copyright header. Long lines are webpack output, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/client/94cbe7021fff11dc.js | AI (source-diff): Standard webpack-minified React component bundle with NocoBase copyright header. Long lines are webpack output, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/client/d64b29a937c2b852.js | AI (source-diff): Standard webpack-minified React component bundle with NocoBase copyright header. Long lines are webpack output, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/client/d7128335ed0ef5d8.js | AI (source-diff): Standard webpack-minified React component bundle with NocoBase copyright header. Long lines are webpack output, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/client/ea8518999398682d.js | AI (source-diff): Standard webpack-minified React component bundle with NocoBase copyright header. Long lines are webpack output, not malicious obfuscation. | ai | |
| bogus-package | bogus-package | AI (bogus-package): README links to official NocoBase documentation pages; this is standard practice for this plugin family, not a link farm. | ai |
Versions (showing 100 of 138)
| Version | Deps | Published |
|---|---|---|
| 2.1.28 | 0 / 0 | |
| 2.1.27 | 0 / 0 | |
| 2.1.26 | 0 / 0 | |
| 2.1.25 | 0 / 0 | |
| 2.1.24 | 0 / 0 | |
| 2.1.20 | 0 / 0 | |
| 2.1.19 | 0 / 0 | |
| 2.1.18 | 0 / 0 | |
| 2.1.9 | 0 / 0 | |
| 2.0.62 | 0 / 0 | |
| 2.0.61 | 0 / 0 | |
| 2.0.60 | 0 / 0 | |
| 2.0.59 | 0 / 0 | |
| 2.0.58 | 0 / 0 | |
| 2.0.57 | 0 / 0 | |
| 2.0.56 | 0 / 0 | |
| 2.0.55 | 0 / 0 | |
| 2.0.54 | 0 / 0 | |
| 2.0.53 | 0 / 0 | |
| 2.0.52 | 0 / 0 | |
| 2.0.51 | 0 / 0 | |
| 2.0.50 | 0 / 0 | |
| 2.0.49 | 0 / 0 | |
| 2.0.48 | 0 / 0 | |
| 2.0.47 | 0 / 0 | |
| 2.0.46 | 0 / 0 | |
| 2.0.45 | 0 / 0 | |
| 2.0.44 | 0 / 0 | |
| 2.0.43 | 0 / 0 | |
| 2.0.42 | 0 / 0 | |
| 2.0.41 | 0 / 0 | |
| 2.0.40 | 0 / 0 | |
| 2.0.39 | 0 / 0 | |
| 2.0.38 | 0 / 0 | |
| 2.0.37 | 0 / 0 | |
| 2.0.36 | 0 / 0 | |
| 2.0.35 | 0 / 0 | |
| 2.0.34 | 0 / 0 | |
| 2.0.33 | 0 / 0 | |
| 2.0.32 | 0 / 0 | |
| 2.0.31 | 0 / 0 | |
| 2.0.30 | 0 / 0 | |
| 2.0.29 | 0 / 0 | |
| 2.0.28 | 0 / 0 | |
| 2.0.27 | 0 / 0 | |
| 2.0.26 | 0 / 0 | |
| 2.0.25 | 0 / 0 | |
| 2.0.24 | 0 / 0 | |
| 2.0.23 | 0 / 0 | |
| 2.0.22 | 0 / 0 | |
| 2.0.21 | 0 / 0 | |
| 2.0.20 | 0 / 0 | |
| 2.0.19 | 0 / 0 | |
| 2.0.18 | 0 / 0 | |
| 2.0.17 | 0 / 0 | |
| 2.0.16 | 0 / 0 | |
| 2.0.15 | 0 / 0 | |
| 2.0.14 | 0 / 0 | |
| 2.0.13 | 0 / 0 | |
| 2.0.12 | 0 / 0 | |
| 2.0.11 | 0 / 0 | |
| 2.0.10 | 0 / 0 | |
| 2.0.9 | 0 / 0 | |
| 2.0.8 | 0 / 0 | |
| 2.0.7 | 0 / 0 | |
| 2.0.6 | 0 / 0 | |
| 2.0.5 | 0 / 0 | |
| 2.0.3 | 0 / 0 | |
| 2.0.2 | 0 / 0 | |
| 2.0.1 | 0 / 0 | |
| 2.0.0 | 0 / 0 | |
| 1.9.68 | 0 / 0 | |
| 1.9.66 | 0 / 0 | |
| 1.9.64 | 0 / 0 | |
| 1.9.63 | 0 / 0 | |
| 1.9.62 | 0 / 0 | |
| 1.9.61 | 0 / 0 | |
| 1.9.60 | 0 / 0 | |
| 1.9.59 | 0 / 0 | |
| 1.9.58 | 0 / 0 | |
| 1.9.57 | 0 / 0 | |
| 1.9.56 | 0 / 0 | |
| 1.9.55 | 0 / 0 | |
| 1.9.54 | 0 / 0 | |
| 1.9.53 | 0 / 0 | |
| 1.9.52 | 0 / 0 | |
| 1.9.51 | 0 / 0 | |
| 1.9.49 | 0 / 0 | |
| 1.9.47 | 0 / 0 | |
| 1.9.46 | 0 / 0 | |
| 1.9.45 | 0 / 0 | |
| 1.9.44 | 0 / 0 | |
| 1.9.43 | 0 / 0 | |
| 1.9.42 | 0 / 0 | |
| 1.9.41 | 0 / 0 | |
| 1.9.40 | 0 / 0 | |
| 1.9.39 | 0 / 0 | |
| 1.9.38 | 0 / 0 | |
| 1.9.37 | 0 / 0 | |
| 1.9.36 | 0 / 0 |
v2.1.28
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.27
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.26
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.25
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.24
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.20
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.19
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.18
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.9.68
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.9.66
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.