@php-wasm/compile-extension
Build PHP.wasm extension side modules across PHP versions
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:fs-ext-extra-prebuilt | AI (phantom-deps): Platform-specific binary package; stable pattern for build tools. | ai | |
| phantom-deps | phantom-dep:@php-wasm/universal | AI (phantom-deps): Same-org scoped dependency; stable pattern for monorepo. | ai | |
| phantom-deps | phantom-dep:wasm-feature-detect | AI (phantom-deps): Config-referenced dependency; stable pattern for build tools. | ai | |
| phantom-deps | phantom-dep:ws | AI (phantom-deps): Config-referenced dependency; stable pattern for build tools. | ai | |
| phantom-deps | phantom-dep:ajv | AI (phantom-deps): Config-referenced dependency; stable pattern for build tools. | ai | |
| phantom-deps | phantom-dep:ini | AI (phantom-deps): Config-referenced dependency; stable pattern for build tools. | ai | |
| phantom-deps | phantom-dep:yargs | AI (phantom-deps): Config-referenced dependency; stable pattern for build tools. | ai | |
| phantom-deps | phantom-dep:express | AI (phantom-deps): Config-referenced dependency; stable pattern for build tools. | ai | |
| phantom-deps | phantom-dep:jsonc-parser | AI (phantom-deps): Config-referenced dependency; stable pattern for build tools. | ai | |
| phantom-deps | phantom-dep:@php-wasm/node | AI (phantom-deps): Same-org scoped dependency; stable pattern for monorepo. | ai | |
| phantom-deps | phantom-dep:fast-xml-parser | AI (phantom-deps): Config-referenced dependency; stable pattern for build tools. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Intentional namespace placeholder for WordPress Playground; sparse content is expected. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Explicitly declared placeholder package from a trusted publisher; 0.0.0 is intentional. | ai |
Versions (showing 23 of 23)
| Version | Deps | Published |
|---|---|---|
| 3.1.47 | 2 / 0 | |
| 3.1.46 | 2 / 0 | |
| 3.1.45 | 2 / 0 | |
| 3.1.44 | 2 / 0 | |
| 3.1.43 | 2 / 0 | |
| 3.1.42 | 2 / 0 | |
| 3.1.41 | 2 / 0 | |
| 3.1.40 | 2 / 0 | |
| 3.1.39 | 2 / 0 | |
| 3.1.38 | 2 / 0 | |
| 3.1.36 | 2 / 0 | |
| 3.1.35 | 2 / 0 | |
| 3.1.34 | 2 / 0 | |
| 3.1.33 | 2 / 0 | |
| 3.1.32 | 2 / 0 | |
| 3.1.31 | 2 / 0 | |
| 3.1.30 | 2 / 0 | |
| 3.1.29 | 2 / 0 | |
| 3.1.28 | 12 / 0 | |
| 3.1.27 | 11 / 0 | |
| 3.1.26 | 11 / 0 | |
| 3.1.25 | 10 / 0 | |
| 0.0.0 | 0 / 0 |
v3.1.47
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.1.46
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.1.45
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.1.44
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.1.43
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.