@ondewo/ondewo-t2s-client-js
ONDEWO Text to Speech (T2S) Client library for Js
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:grpc-web | AI (phantom-deps): grpc-web is a runtime dep used in bundled output; phantom-dep heuristic fires because it's not directly imported in source. | ai | |
| phantom-deps | phantom-dep:google-protobuf | AI (phantom-deps): google-protobuf is a runtime dep consumed via generated protobuf stubs; phantom-dep is a stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:webpack | AI (phantom-deps): webpack is used as a bundler (referenced in config); phantom-dep fires because it's not directly imported in JS source. | ai |
Versions (showing 8 of 8)
| Version | Deps | Published |
|---|---|---|
| 6.6.0 | 7 / 9 | |
| 6.5.0 | 7 / 9 | |
| 6.4.2 | 7 / 9 | |
| 6.4.1 | 6 / 8 | |
| 6.4.0 | 6 / 7 | |
| 6.2.0 | 3 / 7 | |
| 6.1.0 | 3 / 7 | |
| 6.0.0 | 3 / 7 |
v6.6.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.5.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.4.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.4.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.4.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.0.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.