@platforma-sdk/model
Platforma.bio SDK / Block Model
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get() used inside a Proxy trap — standard JS pattern, not obfuscation. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): zod is a declared runtime dependency in package.json; phantom-dep is a false positive for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Sparse metadata is consistent across 220 versions of this established SDK package; not indicative of spam. | ai |
Versions (showing 51 of 240)
| Version | Deps | Published |
|---|---|---|
| 1.80.13 | 11 / 10 | |
| 1.80.10 | 11 / 10 | |
| 1.80.8 | 11 / 10 | |
| 1.80.2 | 11 / 10 | |
| 1.80.0 | 11 / 10 | |
| 1.79.27 | 10 / 9 | |
| 1.79.24 | 10 / 9 | |
| 1.79.20 | 10 / 9 | |
| 1.79.17 | 10 / 9 | |
| 1.79.15 | 10 / 9 | |
| 1.79.14 | 10 / 9 | |
| 1.79.6 | 10 / 9 | |
| 1.79.3 | 10 / 9 | |
| 1.79.2 | 10 / 9 | |
| 1.79.0 | 10 / 9 | |
| 1.78.16 | 10 / 9 | |
| 1.78.13 | 10 / 9 | |
| 1.78.12 | 10 / 9 | |
| 1.78.9 | 10 / 9 | |
| 1.78.7 | 10 / 9 | |
| 1.78.6 | 10 / 9 | |
| 1.78.4 | 10 / 9 | |
| 1.78.2 | 10 / 9 | |
| 1.78.1 | 10 / 9 | |
| 1.78.0 | 10 / 9 | |
| 1.77.20 | 10 / 9 | |
| 1.77.18 | 10 / 9 | |
| 1.77.17 | 10 / 9 | |
| 1.77.16 | 10 / 9 | |
| 1.77.15 | 10 / 9 | |
| 1.77.11 | 10 / 9 | |
| 1.77.10 | 10 / 9 | |
| 1.77.4 | 10 / 9 | |
| 1.77.0 | 10 / 9 | |
| 1.76.5 | 10 / 9 | |
| 1.76.4 | 10 / 9 | |
| 1.75.10 | 10 / 9 | |
| 1.75.8 | 10 / 9 | |
| 1.75.5 | 10 / 9 | |
| 1.75.2 | 10 / 9 | |
| 1.75.1 | 10 / 9 | |
| 1.75.0 | 10 / 9 | |
| 1.74.0 | 10 / 9 | |
| 1.73.3 | 10 / 9 | |
| 1.73.0 | 10 / 9 | |
| 1.72.0 | 10 / 9 | |
| 1.71.0 | 10 / 9 | |
| 1.70.0 | 10 / 9 | |
| 1.69.0 | 10 / 9 | |
| 1.68.8 | 10 / 9 | |
| 1.68.7 | 10 / 9 |
v1.80.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.80.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.80.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.80.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.80.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.27
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.24
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.20
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.