@platforma-sdk/model
Platforma.bio SDK / Block Model
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get() used inside a Proxy trap — standard JS pattern, not obfuscation. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): zod is a declared runtime dependency in package.json; phantom-dep is a false positive for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Sparse metadata is consistent across 220 versions of this established SDK package; not indicative of spam. | ai |
Versions (showing 100 of 240)
| Version | Deps | Published |
|---|---|---|
| 1.44.8 | 5 / 8 | |
| 1.44.5 | 5 / 8 | |
| 1.44.4 | 5 / 8 | |
| 1.44.1 | 5 / 8 | |
| 1.43.29 | 5 / 8 | |
| 1.43.21 | 5 / 8 | |
| 1.43.18 | 5 / 8 | |
| 1.43.14 | 5 / 8 | |
| 1.43.2 | 5 / 8 | |
| 1.43.0 | 5 / 8 | |
| 1.42.51 | 5 / 8 | |
| 1.42.47 | 5 / 8 | |
| 1.42.46 | 5 / 8 | |
| 1.42.36 | 5 / 8 | |
| 1.42.35 | 5 / 8 | |
| 1.42.25 | 5 / 8 | |
| 1.42.23 | 5 / 8 | |
| 1.42.22 | 5 / 8 | |
| 1.42.20 | 5 / 8 | |
| 1.42.16 | 5 / 10 | |
| 1.42.15 | 5 / 10 | |
| 1.42.10 | 5 / 10 | |
| 1.42.8 | 5 / 10 | |
| 1.42.4 | 5 / 10 | |
| 1.42.1 | 5 / 10 | |
| 1.42.0 | 5 / 10 | |
| 1.41.6 | 5 / 10 | |
| 1.41.4 | 5 / 10 | |
| 1.41.3 | 5 / 10 | |
| 1.41.2 | 5 / 10 | |
| 1.41.1 | 5 / 10 | |
| 1.41.0 | 5 / 10 | |
| 1.40.6 | 5 / 9 | |
| 1.40.5 | 5 / 9 | |
| 1.40.1 | 5 / 9 | |
| 1.40.0 | 5 / 9 | |
| 1.39.18 | 5 / 9 | |
| 1.39.8 | 5 / 9 | |
| 1.39.7 | 5 / 9 | |
| 1.39.6 | 5 / 9 | |
| 1.39.0 | 5 / 9 | |
| 1.38.0 | 5 / 9 | |
| 1.37.18 | 5 / 8 | |
| 1.37.14 | 5 / 8 | |
| 1.37.11 | 5 / 8 | |
| 1.37.2 | 5 / 8 | |
| 1.37.0 | 5 / 8 | |
| 1.34.10 | 5 / 8 | |
| 1.34.8 | 5 / 8 | |
| 1.34.0 | 5 / 8 | |
| 1.33.17 | 5 / 8 | |
| 1.33.16 | 5 / 8 | |
| 1.33.14 | 5 / 8 | |
| 1.33.10 | 5 / 8 | |
| 1.33.8 | 5 / 8 | |
| 1.33.2 | 5 / 8 | |
| 1.32.1 | 5 / 8 | |
| 1.31.17 | 5 / 8 | |
| 1.31.16 | 5 / 8 | |
| 1.31.15 | 5 / 8 | |
| 1.31.14 | 5 / 8 | |
| 1.31.6 | 5 / 8 | |
| 1.30.37 | 5 / 8 | |
| 1.30.26 | 5 / 8 | |
| 1.30.24 | 5 / 8 | |
| 1.30.21 | 5 / 8 | |
| 1.30.11 | 5 / 8 | |
| 1.30.3 | 5 / 8 | |
| 1.30.0 | 5 / 8 | |
| 1.29.22 | 5 / 8 | |
| 1.29.17 | 5 / 8 | |
| 1.29.16 | 5 / 8 | |
| 1.29.14 | 5 / 8 | |
| 1.29.13 | 5 / 8 | |
| 1.29.12 | 5 / 8 | |
| 1.29.2 | 5 / 8 | |
| 1.29.0 | 5 / 8 | |
| 1.28.4 | 5 / 8 | |
| 1.28.1 | 5 / 8 | |
| 1.28.0 | 5 / 8 | |
| 1.27.17 | 4 / 8 | |
| 1.27.10 | 4 / 8 | |
| 1.27.8 | 3 / 8 | |
| 1.27.6 | 3 / 8 | |
| 1.26.0 | 3 / 8 | |
| 1.25.0 | 3 / 8 | |
| 1.24.11 | 3 / 8 | |
| 1.24.10 | 3 / 8 | |
| 1.24.9 | 3 / 8 | |
| 1.24.5 | 3 / 8 | |
| 1.24.0 | 3 / 8 | |
| 1.23.4 | 3 / 8 | |
| 1.23.0 | 3 / 8 | |
| 1.22.97 | 3 / 7 | |
| 1.22.59 | 3 / 7 | |
| 1.22.18 | 3 / 7 | |
| 1.22.2 | 3 / 7 | |
| 1.22.0 | 3 / 7 | |
| 1.21.20 | 3 / 7 | |
| 1.21.10 | 3 / 7 |
v1.29.22
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.29.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.29.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.29.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.29.13
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.29.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.29.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.29.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.28.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.28.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.28.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.27.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.27.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.27.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.27.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.26.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.25.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.24.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.24.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.24.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.24.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.24.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.23.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.23.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.22.97
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.22.59
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.22.18
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.22.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.22.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.21.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.21.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.