← Home

@quatrain/backend

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

crapougnaxelliottlepine

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:api-obfuscation-reflect AI (semgrep): Reflect.get() used for property access in ORM-style code; not obfuscation, stable pattern for this package. ai
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require is a documented repository-loader pattern in this backend framework; not arbitrary code execution. ai
phantom-deps phantom-dep:@quatrain/log AI (phantom-deps): Same-org sibling dep; likely re-exported or used indirectly through @quatrain/core. ai

Versions (showing 51 of 54)

View all versions
Version Deps Published
1.2.17 4 / 11
1.2.14 4 / 11
1.2.13 4 / 11
1.2.12 4 / 11
1.2.11 4 / 11
1.2.10 3 / 12
1.2.9 3 / 12
1.2.8 3 / 12
1.2.7 3 / 12
1.2.6 3 / 12
1.2.5 3 / 12
1.2.4 3 / 12
1.2.3 3 / 12
1.2.2 3 / 12
1.2.1 3 / 12
1.1.37 3 / 12
1.1.34 3 / 11
1.1.33 3 / 11
1.1.32 3 / 11
1.1.31 3 / 11
1.1.30 3 / 11
1.1.29 3 / 11
1.1.28 3 / 11
1.1.27 3 / 11
1.1.26 3 / 11
1.1.25 3 / 11
1.1.24 3 / 11
1.1.23 3 / 8
1.1.22 3 / 8
1.1.21 3 / 8
1.1.20 3 / 8
1.1.19 3 / 8
1.1.18 3 / 8
1.1.17 3 / 8
1.1.16 3 / 8
1.1.15 3 / 8
1.1.14 3 / 8
1.1.13 3 / 8
1.1.12 2 / 8
1.1.11 2 / 8
1.1.10 1 / 8
1.1.9 1 / 8
1.1.8 1 / 8
1.1.7 1 / 8
1.1.6 1 / 8
1.1.5 1 / 8
1.1.2 1 / 9
1.1.1 0 / 11
1.1.0 0 / 11
1.0.4 0 / 11
1.0.3 0 / 11

v1.1.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.