@pact-foundation/pact-core
8
Versions
—
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
mefellows-pactyou54fmfellowstimothyjones
Keywords
pactnodewrappermockserviceproviderverifier
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | large-new-source-files | AI (source-diff): Major version release with platform-split optional deps; large file additions are expected for this package. | ai | |
| provenance | no-provenance | AI (provenance): Established pact-foundation org package; missing provenance is common and not a risk signal here. | ai | |
| install-scripts | install-script:install | AI (install-scripts): Install script is empty string; no code executes. Stable for this package. | ai | |
| dependencies | unvetted-dep:node-gyp-build | AI (dependencies): node-gyp-build is the standard loader for prebuilt native binaries; expected for this native addon package. | ai |