@platforma-sdk/model
Platforma.bio SDK / Block Model
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get() used inside a Proxy trap — standard JS pattern, not obfuscation. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): zod is a declared runtime dependency in package.json; phantom-dep is a false positive for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Sparse metadata is consistent across 220 versions of this established SDK package; not indicative of spam. | ai |
Versions (showing 100 of 240)
| Version | Deps | Published |
|---|---|---|
| 1.80.13 | 11 / 10 | |
| 1.80.10 | 11 / 10 | |
| 1.80.8 | 11 / 10 | |
| 1.80.2 | 11 / 10 | |
| 1.80.0 | 11 / 10 | |
| 1.79.27 | 10 / 9 | |
| 1.79.24 | 10 / 9 | |
| 1.79.20 | 10 / 9 | |
| 1.79.17 | 10 / 9 | |
| 1.79.15 | 10 / 9 | |
| 1.79.14 | 10 / 9 | |
| 1.79.6 | 10 / 9 | |
| 1.79.3 | 10 / 9 | |
| 1.79.2 | 10 / 9 | |
| 1.79.0 | 10 / 9 | |
| 1.78.16 | 10 / 9 | |
| 1.78.13 | 10 / 9 | |
| 1.78.12 | 10 / 9 | |
| 1.78.9 | 10 / 9 | |
| 1.78.7 | 10 / 9 | |
| 1.78.6 | 10 / 9 | |
| 1.78.4 | 10 / 9 | |
| 1.78.2 | 10 / 9 | |
| 1.78.1 | 10 / 9 | |
| 1.78.0 | 10 / 9 | |
| 1.77.20 | 10 / 9 | |
| 1.77.18 | 10 / 9 | |
| 1.77.17 | 10 / 9 | |
| 1.77.16 | 10 / 9 | |
| 1.77.15 | 10 / 9 | |
| 1.77.11 | 10 / 9 | |
| 1.77.10 | 10 / 9 | |
| 1.77.4 | 10 / 9 | |
| 1.77.0 | 10 / 9 | |
| 1.76.5 | 10 / 9 | |
| 1.76.4 | 10 / 9 | |
| 1.75.10 | 10 / 9 | |
| 1.75.8 | 10 / 9 | |
| 1.75.5 | 10 / 9 | |
| 1.75.2 | 10 / 9 | |
| 1.75.1 | 10 / 9 | |
| 1.75.0 | 10 / 9 | |
| 1.74.0 | 10 / 9 | |
| 1.73.3 | 10 / 9 | |
| 1.73.0 | 10 / 9 | |
| 1.72.0 | 10 / 9 | |
| 1.71.0 | 10 / 9 | |
| 1.70.0 | 10 / 9 | |
| 1.69.0 | 10 / 9 | |
| 1.68.8 | 10 / 9 | |
| 1.68.7 | 10 / 9 | |
| 1.68.6 | 10 / 9 | |
| 1.68.5 | 10 / 9 | |
| 1.68.4 | 10 / 9 | |
| 1.68.0 | 10 / 9 | |
| 1.67.0 | 10 / 9 | |
| 1.66.2 | 10 / 9 | |
| 1.65.10 | 10 / 9 | |
| 1.65.9 | 10 / 9 | |
| 1.65.8 | 10 / 9 | |
| 1.65.6 | 10 / 9 | |
| 1.65.4 | 10 / 9 | |
| 1.65.3 | 10 / 9 | |
| 1.65.0 | 10 / 9 | |
| 1.64.0 | 10 / 9 | |
| 1.63.12 | 10 / 9 | |
| 1.63.1 | 10 / 9 | |
| 1.63.0 | 10 / 9 | |
| 1.62.0 | 10 / 9 | |
| 1.53.4 | 7 / 9 | |
| 1.53.3 | 7 / 9 | |
| 1.53.2 | 7 / 9 | |
| 1.53.1 | 7 / 9 | |
| 1.53.0 | 7 / 9 | |
| 1.52.7 | 7 / 9 | |
| 1.52.3 | 7 / 9 | |
| 1.52.0 | 7 / 9 | |
| 1.51.9 | 7 / 9 | |
| 1.51.6 | 7 / 9 | |
| 1.51.5 | 7 / 9 | |
| 1.51.2 | 7 / 9 | |
| 1.50.0 | 7 / 9 | |
| 1.49.0 | 7 / 9 | |
| 1.48.14 | 7 / 9 | |
| 1.48.13 | 7 / 9 | |
| 1.48.12 | 7 / 8 | |
| 1.48.4 | 7 / 8 | |
| 1.48.2 | 7 / 8 | |
| 1.47.5 | 7 / 8 | |
| 1.46.0 | 7 / 8 | |
| 1.45.45 | 7 / 8 | |
| 1.45.42 | 6 / 8 | |
| 1.45.35 | 6 / 8 | |
| 1.45.30 | 6 / 8 | |
| 1.45.26 | 6 / 8 | |
| 1.45.23 | 6 / 8 | |
| 1.45.17 | 6 / 8 | |
| 1.45.0 | 6 / 8 | |
| 1.44.14 | 5 / 8 | |
| 1.44.13 | 5 / 8 |
v1.80.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.80.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.80.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.80.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.80.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.27
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.24
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.20
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.68.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.67.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.65.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.63.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.