@nx-ddd/core
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:cors | AI (typosquat): Scoped NX/Angular DDD library; name similarity to 'cors' is coincidental, not a squatting attempt. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a standard Angular/TypeScript runtime dep; phantom-dep false positive for compiled Angular libraries. | ai |
Versions (showing 51 of 84)
| Version | Deps | Published |
|---|---|---|
| 19.87.0 | 1 / 0 | |
| 19.86.1 | 1 / 0 | |
| 19.86.0 | 1 / 0 | |
| 19.85.0 | 1 / 0 | |
| 19.84.0 | 1 / 0 | |
| 19.83.0 | 1 / 0 | |
| 19.82.0 | 1 / 0 | |
| 19.81.1 | 1 / 0 | |
| 19.81.0 | 1 / 0 | |
| 19.80.0 | 1 / 0 | |
| 19.51.0 | 1 / 0 | |
| 19.50.0 | 1 / 0 | |
| 19.49.0 | 1 / 0 | |
| 19.48.0 | 1 / 0 | |
| 19.47.0 | 1 / 0 | |
| 19.46.1 | 1 / 0 | |
| 19.46.0 | 1 / 0 | |
| 19.45.2 | 1 / 0 | |
| 19.45.1 | 1 / 0 | |
| 19.45.0 | 1 / 0 | |
| 19.44.0 | 1 / 0 | |
| 19.43.0 | 1 / 0 | |
| 19.42.0 | 1 / 0 | |
| 19.39.0 | 1 / 0 | |
| 19.38.1 | 1 / 0 | |
| 19.38.0 | 1 / 0 | |
| 19.37.0 | 1 / 0 | |
| 19.36.0 | 1 / 0 | |
| 19.35.0 | 1 / 0 | |
| 19.34.0 | 1 / 0 | |
| 19.33.1 | 1 / 0 | |
| 19.33.0 | 1 / 0 | |
| 19.32.0 | 1 / 0 | |
| 19.31.0 | 1 / 0 | |
| 19.30.0 | 1 / 0 | |
| 19.29.0 | 1 / 0 | |
| 19.28.0 | 1 / 0 | |
| 19.27.0 | 1 / 0 | |
| 19.26.0 | 1 / 0 | |
| 19.25.0 | 1 / 0 | |
| 19.24.1 | 1 / 0 | |
| 19.21.8 | 1 / 0 | |
| 19.21.7 | 1 / 0 | |
| 19.21.6 | 1 / 0 | |
| 19.21.5 | 1 / 0 | |
| 19.21.3 | 1 / 0 | |
| 19.21.2 | 1 / 0 | |
| 19.21.1 | 1 / 0 | |
| 19.21.0 | 1 / 0 | |
| 19.20.0 | 1 / 0 | |
| 19.19.1 | 1 / 0 |
v19.87.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.86.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.86.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.85.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.84.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.83.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.82.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.81.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.81.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.80.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.