@open-keystone/fields-cloudinary-image
KeystoneJS Cloudinary Image Field Type
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): No provenance is common for this publisher's packages; not a meaningful risk signal here. | ai | |
| dependencies | unvetted-dep:@open-arch-ui/button | AI (dependencies): Internal UI component from same org ecosystem; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@open-arch-ui/layout | AI (dependencies): Internal UI component from same org ecosystem; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@open-arch-ui/lozenge | AI (dependencies): Internal UI component from same org ecosystem; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@iframely/embed.js | AI (dependencies): Known iframely embed library; consistent with image field plugin functionality. | ai | |
| dependencies | unvetted-dep:slate-drop-or-paste-images | AI (dependencies): Known Slate.js plugin for image handling; consistent with this package's purpose. | ai | |
| dependencies | unvetted-dep:@open-arch-ui/input | AI (dependencies): Internal UI component from same org ecosystem; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@open-arch-ui/theme | AI (dependencies): Internal UI component from same org ecosystem; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@open-arch-ui/fields | AI (dependencies): Internal UI component from same org ecosystem; stable pattern across versions. | ai | |
| phantom-deps | phantom-dep:@open-keystone/adapter-knex | AI (phantom-deps): Same-org sibling dep; phantom-dep heuristic not meaningful here. | ai | |
| phantom-deps | phantom-dep:@open-keystone/adapter-mongoose | AI (phantom-deps): Same-org sibling dep; phantom-dep heuristic not meaningful here. | ai | |
| phantom-deps | phantom-dep:query-string | AI (phantom-deps): Phantom-dep heuristic false positive; query-string is a common transitive dep in this ecosystem. | ai | |
| phantom-deps | phantom-dep:@iframely/embed.js | AI (phantom-deps): Referenced in config files as documented; stable false positive for this package. | ai |
Versions (showing 23 of 23)
| Version | Deps | Published |
|---|---|---|
| 4.0.26 | 21 / 5 | |
| 4.0.25 | 21 / 5 | |
| 4.0.24 | 21 / 5 | |
| 4.0.23 | 21 / 5 | |
| 4.0.22 | 21 / 5 | |
| 4.0.21 | 21 / 5 | |
| 4.0.20 | 21 / 5 | |
| 4.0.19 | 21 / 5 | |
| 4.0.18 | 21 / 5 | |
| 4.0.17 | 21 / 5 | |
| 4.0.16 | 21 / 5 | |
| 4.0.14 | 21 / 5 | |
| 4.0.13 | 21 / 5 | |
| 4.0.12 | 21 / 5 | |
| 4.0.10 | 21 / 5 | |
| 4.0.7 | 21 / 5 | |
| 4.0.6 | 21 / 5 | |
| 4.0.5 | 21 / 5 | |
| 4.0.4 | 21 / 5 | |
| 4.0.3 | 21 / 5 | |
| 4.0.2 | 21 / 5 | |
| 4.0.1 | 21 / 5 | |
| 4.0.0 | 21 / 5 |
v4.0.26
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.25
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.24
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.23
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.