← Home

@onebun/core

npm Repository Homepage

Core package for OneBun framework - decorators, DI, modules, controllers

57
Versions
MPL-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

remryahirev

Keywords

onebunframeworkbuntypescripteffectdecoratorsdependency-injectioncontrollersmodules

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:cors AI (typosquat): @onebun/core is a scoped framework package, not a typosquat of the 'cors' middleware. ai
semgrep semgrep:etc-passwd-access AI (semgrep): Appears in a test file verifying path traversal protection — not credential harvesting. ai
semgrep semgrep:shady-links-raw-ip AI (semgrep): 0.0.0.0 is a bind address in a test assertion, not an exfiltration endpoint. ai
semgrep semgrep:base64-decode AI (semgrep): Base64 decode is part of Socket.IO protocol parsing, a standard protocol operation. ai

Versions (showing 57 of 57)

Version Deps Published
0.4.4 8 / 2
0.4.3 8 / 2
0.4.2 8 / 2
0.4.1 8 / 2
0.4.0 8 / 2
0.3.8 8 / 2
0.3.7 8 / 2
0.3.6 8 / 2
0.3.5 8 / 2
0.3.4 8 / 2
0.3.3 8 / 2
0.3.2 8 / 2
0.3.1 8 / 2
0.3.0 8 / 2
0.2.17 8 / 2
0.2.16 7 / 2
0.2.15 7 / 2
0.2.14 7 / 2
0.2.13 7 / 2
0.2.12 7 / 2
0.2.11 7 / 2
0.2.10 7 / 2
0.2.9 7 / 2
0.2.8 7 / 2
0.2.7 7 / 2
0.2.6 7 / 2
0.2.5 7 / 2
0.2.4 7 / 2
0.2.3 7 / 2
0.2.2 7 / 2
0.2.1 7 / 2
0.2.0 7 / 2
0.1.24 7 / 2
0.1.23 7 / 2
0.1.22 7 / 2
0.1.21 7 / 2
0.1.20 7 / 2
0.1.19 7 / 2
0.1.18 7 / 2
0.1.17 7 / 2
0.1.16 7 / 2
0.1.15 7 / 2
0.1.14 7 / 2
0.1.13 7 / 2
0.1.12 7 / 2
0.1.11 7 / 2
0.1.10 7 / 1
0.1.9 7 / 1
0.1.8 7 / 1
0.1.7 7 / 1
0.1.6 7 / 1
0.1.5 7 / 1
0.1.4 7 / 1
0.1.3 7 / 1
0.1.2 7 / 1
0.1.1 7 / 1
0.1.0 7 / 1