@playcraft/common
PlayCraft monorepo 内部共享库，给 CLI Agent / Backend / Realtime / Messenger 提供可复用的通用能力。
17
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
homkeraix-playablechenweifang
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): No provenance has been present across versions; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:ot-text | AI (dependencies): ot-text is a well-known ShareDB operational-transform type; legitimate dep for this package's use case. | ai | |
| dependencies | unvetted-dep:@teamwork/websocket-json-stream | AI (dependencies): Standard ShareDB companion library from @teamwork; legitimate for this collaborative-editing package. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): fuse.js is a well-established fuzzy-search library with no known malicious history. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Internal/monorepo shared library; missing repo URL and sparse README are expected for this type of package. | ai |