@npmcli/query
npm query parser and tools
14
Versions
ISC
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
saquibkhannpm-cli-opsreggiowlstronaut
Keywords
astnpmnpmcliparserpostcsspostcss-selector-parserquery
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Both gar and nlf are known npm CLI team members; this is a routine team rotation within the @npmcli org. | ai | |
| provenance | no-provenance | AI (provenance): Published in 2022 before Sigstore provenance was standard for npm CLI packages. | ai | |
| dependencies | unvetted-dep:postcss-selector-parser | AI (dependencies): postcss-selector-parser is a well-established CSS selector parsing library; its use is expected and appropriate for @npmcli/query's purpose of parsing npm CSS-style queries. | ai |