@platformatic/gateway
Platformatic Gateway is an API gateway that aggregates and exposes multiple services as a single API, with support for OpenAPI composition and GraphQL federation.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | no-description | AI (npm-metadata): Empty description is a known pattern in this monorepo; not indicative of malicious intent. | ai | |
| phantom-deps | phantom-dep:ora | AI (phantom-deps): CLI framework package; deps referenced in config/CLI context, stable false positive. | ai | |
| phantom-deps | phantom-dep:pino | AI (phantom-deps): Logging dep used transitively via framework config; stable false positive. | ai | |
| phantom-deps | phantom-dep:execa | AI (phantom-deps): Referenced in config files; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:graphql | AI (phantom-deps): GraphQL dep used via mercurius/composer; stable false positive. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): Localhost example origin constant (127.0.0.1:3043) in generator.js; not a network exfiltration risk. | ai | |
| phantom-deps | phantom-dep:minimist | AI (phantom-deps): CLI arg parsing dep referenced in config; stable false positive. | ai | |
| phantom-deps | phantom-dep:pino-pretty | AI (phantom-deps): Logging dep referenced in config; stable false positive. | ai | |
| phantom-deps | phantom-dep:console-table-printer | AI (phantom-deps): CLI output dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@platformatic/telemetry | AI (phantom-deps): Same-org sibling dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:help-me | AI (phantom-deps): CLI help dep referenced in config; stable false positive. | ai |
Versions (showing 92 of 92)
| Version | Deps | Published |
|---|---|---|
| 3.63.0 | 40 / 18 | |
| 3.62.5 | 40 / 18 | |
| 3.62.4 | 40 / 18 | |
| 3.62.3 | 40 / 18 | |
| 3.62.2 | 39 / 18 | |
| 3.62.1 | 39 / 18 | |
| 3.62.0 | 39 / 18 | |
| 3.61.1 | 39 / 18 | |
| 3.61.0 | 39 / 18 | |
| 3.60.0 | 39 / 18 | |
| 3.59.0 | 39 / 18 | |
| 3.58.1 | 39 / 18 | |
| 3.58.0 | 39 / 18 | |
| 3.57.0 | 34 / 18 | |
| 3.56.0 | 34 / 18 | |
| 3.55.0 | 33 / 18 | |
| 3.54.0 | 33 / 18 | |
| 3.53.0 | 33 / 18 | |
| 3.52.4 | 33 / 18 | |
| 3.52.3 | 33 / 18 | |
| 3.52.2 | 33 / 18 | |
| 3.52.1 | 33 / 18 | |
| 3.52.0 | 33 / 18 | |
| 3.51.0 | 33 / 18 | |
| 3.50.0 | 33 / 18 | |
| 3.49.1 | 33 / 18 | |
| 3.49.0 | 33 / 18 | |
| 3.48.0 | 33 / 18 | |
| 3.47.0 | 33 / 18 | |
| 3.46.0 | 33 / 17 | |
| 3.45.0 | 33 / 17 | |
| 3.44.0 | 33 / 17 | |
| 3.43.0 | 33 / 17 | |
| 3.42.0 | 33 / 17 | |
| 3.41.0 | 33 / 17 | |
| 3.40.0 | 33 / 17 | |
| 3.39.0 | 33 / 17 | |
| 3.38.1 | 33 / 17 | |
| 3.38.0 | 33 / 18 | |
| 3.37.0 | 33 / 18 | |
| 3.36.0 | 33 / 18 | |
| 3.35.1 | 33 / 18 | |
| 3.35.0 | 33 / 18 | |
| 3.34.1 | 33 / 18 | |
| 3.33.0 | 33 / 18 | |
| 3.32.0 | 33 / 18 | |
| 3.31.0 | 33 / 18 | |
| 3.30.0 | 33 / 18 | |
| 3.29.1 | 33 / 18 | |
| 3.29.0 | 33 / 18 | |
| 3.28.2 | 33 / 18 | |
| 3.28.1 | 33 / 18 | |
| 3.28.0 | 33 / 18 | |
| 3.27.0 | 33 / 18 | |
| 3.26.0 | 33 / 18 | |
| 3.25.0 | 33 / 18 | |
| 3.24.0 | 33 / 18 | |
| 3.23.0 | 33 / 18 | |
| 3.22.0 | 33 / 18 | |
| 3.21.0 | 33 / 18 | |
| 3.20.0 | 33 / 18 | |
| 3.19.0 | 33 / 18 | |
| 3.18.0 | 33 / 18 | |
| 3.17.0 | 33 / 18 | |
| 3.16.0 | 33 / 18 | |
| 3.15.0 | 33 / 18 | |
| 3.14.0 | 33 / 18 | |
| 3.13.1 | 33 / 18 | |
| 3.13.0 | 33 / 18 | |
| 3.12.0 | 33 / 18 | |
| 3.11.0 | 33 / 18 | |
| 3.10.0 | 33 / 18 | |
| 3.9.0 | 33 / 18 | |
| 3.8.0 | 33 / 18 | |
| 3.7.1 | 33 / 18 | |
| 3.7.0 | 33 / 18 | |
| 3.6.0 | 33 / 18 | |
| 3.5.1 | 33 / 18 | |
| 3.5.0 | 33 / 18 | |
| 3.4.1 | 33 / 18 | |
| 3.4.0 | 33 / 18 | |
| 3.3.0 | 33 / 17 | |
| 3.2.1 | 33 / 17 | |
| 3.2.0 | 33 / 17 | |
| 3.1.0 | 33 / 17 | |
| 3.0.6 | 33 / 17 | |
| 3.0.5 | 33 / 17 | |
| 3.0.4 | 33 / 17 | |
| 3.0.3 | 33 / 17 | |
| 3.0.2 | 33 / 17 | |
| 3.0.1 | 33 / 17 | |
| 3.0.0 | 33 / 17 |
v3.63.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.62.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.62.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.62.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.62.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.62.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.62.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.61.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.61.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.60.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.59.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.58.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.58.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.