@omnia/tooling
Provide basic stuffs extensible for omnia extension.
51
Versions
SEE LICENSE IN LICENSE.txt
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
diego-souza-omniamickejohannessonandtii
Keywords
omniaomniafxextensionoffice365sharepoint
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): High-volume org package; missing gitHead reflects CI environment change, not a supply-chain risk for this package. | ai | |
| provenance | no-provenance | AI (provenance): Established org package; lack of Sigstore provenance is a process gap, not a security indicator for this package. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Established Omnia org package with consistent publisher track record and matching repo; dormancy likely reflects org publishing cadence. | ai | |
| phantom-deps | phantom-dep:chokidar | AI (phantom-deps): Referenced in config files; stable false positive for this build tooling package. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): File-path-based require in a CLI tooling package; standard plugin/config loader pattern across all versions. | ai | |
| phantom-deps | phantom-dep:@omnia/types | AI (phantom-deps): Same-org type-only dependency; phantom detection is a stable false positive here. | ai | |
| phantom-deps | phantom-dep:esbuild-loader | AI (phantom-deps): Referenced in config files; stable false positive for this build tooling package. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): JSON parsing idiom from bundled esbuild-register; not user-controlled arbitrary code execution. | ai | |
| phantom-deps | phantom-dep:globby | AI (phantom-deps): Referenced in config files; stable false positive for this build tooling package. | ai |
Versions (showing 51 of 162)
| Version | Deps | Published |
|---|---|---|
| 7.11.18 | 12 / 0 | |
| 7.11.17 | 12 / 0 | |
| 7.11.16 | 12 / 0 | |
| 7.11.15 | 12 / 0 | |
| 7.11.14 | 12 / 0 | |
| 7.11.13 | 12 / 0 | |
| 7.11.12 | 12 / 0 | |
| 7.11.11 | 12 / 0 | |
| 7.11.10 | 12 / 0 | |
| 7.11.9 | 12 / 0 | |
| 7.11.8 | 12 / 0 | |
| 7.11.7 | 12 / 0 | |
| 7.11.6 | 12 / 0 | |
| 7.11.5 | 12 / 0 | |
| 7.11.4 | 12 / 0 | |
| 7.11.3 | 12 / 0 | |
| 7.11.2 | 12 / 0 | |
| 7.11.1 | 12 / 0 | |
| 7.9.43 | 12 / 0 | |
| 7.9.42 | 12 / 0 | |
| 7.9.41 | 12 / 0 | |
| 7.9.40 | 12 / 0 | |
| 7.9.39 | 12 / 0 | |
| 7.9.38 | 12 / 0 | |
| 7.9.37 | 12 / 0 | |
| 7.9.36 | 12 / 0 | |
| 7.9.35 | 12 / 0 | |
| 7.9.34 | 12 / 0 | |
| 7.9.30 | 12 / 0 | |
| 7.9.29 | 12 / 0 | |
| 7.9.28 | 12 / 0 | |
| 7.9.27 | 12 / 0 | |
| 7.9.26 | 12 / 0 | |
| 7.9.25 | 12 / 0 | |
| 7.9.24 | 12 / 0 | |
| 7.9.23 | 12 / 0 | |
| 7.9.22 | 12 / 0 | |
| 7.9.21 | 12 / 0 | |
| 7.9.20 | 12 / 0 | |
| 7.9.19 | 12 / 0 | |
| 7.9.18 | 12 / 0 | |
| 7.9.17 | 12 / 0 | |
| 7.9.14 | 12 / 0 | |
| 7.9.13 | 12 / 0 | |
| 7.9.12 | 12 / 0 | |
| 7.9.11 | 12 / 0 | |
| 7.9.10 | 12 / 0 | |
| 7.9.9 | 12 / 0 | |
| 7.9.7 | 12 / 0 | |
| 7.9.6 | 12 / 0 | |
| 7.9.5 | 12 / 0 |
v7.11.18
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.