← Home

@platformatic/sql-mapper

npm Repository Homepage

A data mapper utility for SQL databases

29
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

mzugmivan-tymoshenkomarcopiraccinileorossishogun_pandamatteo.collinaqardlucamaraschi

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:inflected AI (dependencies): Known English inflection library; stable dependency of this package across versions. ai
dependencies unvetted-dep:@databases/pg AI (dependencies): Well-known @databases PostgreSQL adapter; stable dependency of this package. ai
dependencies unvetted-dep:@databases/sql AI (dependencies): Well-known @databases SQL utility; stable dependency of this package. ai
dependencies unvetted-dep:@databases/mysql AI (dependencies): Well-known @databases MySQL adapter; stable dependency of this package. ai
dependencies unvetted-dep:@matteo.collina/sqlite-pool AI (dependencies): SQLite pool by Matteo Collina (Node.js TSC member); stable dependency of this package. ai
phantom-deps phantom-dep:@platformatic/telemetry AI (phantom-deps): Same-org sibling declared in dependencies; phantom-dep heuristic false positive for this package. ai

Versions (showing 29 of 29)

Version Deps Published
3.63.0 12 / 7
3.62.5 12 / 7
3.62.4 12 / 7
3.62.3 12 / 7
3.62.2 12 / 7
3.62.1 12 / 7
3.62.0 12 / 7
3.61.1 12 / 7
3.61.0 12 / 7
3.60.0 12 / 7
3.59.0 12 / 7
3.58.1 12 / 7
3.58.0 12 / 7
3.57.0 12 / 7
3.56.0 12 / 7
3.55.0 12 / 7
3.54.0 12 / 7
3.53.0 12 / 7
3.52.4 12 / 7
3.52.3 12 / 7
3.51.0 12 / 7
3.50.0 12 / 7
3.49.1 12 / 7
3.49.0 12 / 7
3.48.0 12 / 7
3.46.0 12 / 7
3.17.0 12 / 7
3.15.0 12 / 7
3.4.1 12 / 8

v3.63.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.62.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.62.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.62.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.62.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.62.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.62.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.61.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.61.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.60.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.59.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.58.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.58.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.