@octokit/app
5
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
octokitbot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:hapi | AI (typosquat): @octokit/app is a canonical scoped package under the official Octokit org; levenshtein match against 'hapi' is a false positive with no plausible typosquat scenario. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): @octokit/app is a canonical scoped package under the official Octokit org; levenshtein match against 'pg' is a false positive with no plausible typosquat scenario. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): @octokit/app is a canonical scoped package under the official Octokit org; levenshtein match against 'yup' is a false positive with no plausible typosquat scenario. | ai | |
| typosquat | typosquat.levenshtein:ajv | AI (typosquat): @octokit/app is a canonical scoped package under the official Octokit org; levenshtein match against 'ajv' is a false positive with no plausible typosquat scenario. | ai | |
| dependencies | unvetted-dep:@octokit/webhooks | AI (dependencies): First-party Octokit sibling package; expected runtime dependency for a GitHub Apps toolkit published by the same org. | ai | |
| dependencies | unvetted-dep:@octokit/oauth-app | AI (dependencies): First-party Octokit sibling package; expected runtime dependency for a GitHub Apps toolkit published by the same org. | ai | |
| dependencies | unvetted-dep:@octokit/auth-unauthenticated | AI (dependencies): First-party Octokit sibling package; expected runtime dependency for a GitHub Apps toolkit published by the same org. | ai |