@quenty/friendutils
Utlity functions to help find friends of a user. Also contains utility to make testing in studio easier.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@quentystudios/jest-lua | AI (phantom-deps): Lua test dep, not JS-importable; same pattern as other accepted phantom deps in this org. | ai | |
| phantom-deps | phantom-dep:@quenty/pagesutils | AI (phantom-deps): Same-org first-party Lua dep, false positive from JS import scanner. | ai | |
| phantom-deps | phantom-dep:@quenty/playermock | AI (phantom-deps): Same-org first-party Lua dep, false positive from JS import scanner. | ai | |
| phantom-deps | phantom-dep:@quenty/nevermore-test-runner | AI (phantom-deps): Same-org first-party Lua dep, false positive from JS import scanner. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Large monorepo package; inactivity gaps are expected and publisher has 887 approved packages with no rejections. | ai | |
| install-scripts | install-script:preinstall | AI (install-scripts): npx only-allow pnpm is a benign package manager enforcement script; stable pattern across this monorepo. | ai | |
| phantom-deps | phantom-dep:@quenty/promise | AI (phantom-deps): Lua/Roblox package; JS import detection doesn't apply. Same-org dependency, stable false positive. | ai | |
| phantom-deps | phantom-dep:@quenty/rx | AI (phantom-deps): Lua/Roblox package; JS import detection doesn't apply. Same-org dependency, stable false positive. | ai | |
| phantom-deps | phantom-dep:@quenty/brio | AI (phantom-deps): Lua/Roblox package; JS import detection doesn't apply. Same-org dependency, stable false positive. | ai | |
| phantom-deps | phantom-dep:@quenty/maid | AI (phantom-deps): Lua/Roblox package; JS import detection doesn't apply. Same-org dependency, stable false positive. | ai | |
| phantom-deps | phantom-dep:@quenty/loader | AI (phantom-deps): Lua/Roblox package; JS import detection doesn't apply. Same-org dependency, stable false positive. | ai |
Versions (showing 45 of 45)
| Version | Deps | Published |
|---|---|---|
| 12.33.0 | 9 / 0 | |
| 12.30.1 | 5 / 0 | |
| 12.30.0 | 5 / 0 | |
| 12.29.2 | 5 / 0 | |
| 12.28.0 | 5 / 0 | |
| 12.27.0 | 5 / 0 | |
| 12.26.0 | 5 / 0 | |
| 12.25.0 | 5 / 0 | |
| 12.24.1 | 5 / 0 | |
| 12.22.1 | 5 / 0 | |
| 12.22.0 | 5 / 0 | |
| 12.21.0 | 5 / 0 | |
| 12.20.6 | 5 / 0 | |
| 12.20.5 | 5 / 0 | |
| 12.20.4 | 5 / 0 | |
| 12.20.3 | 5 / 0 | |
| 12.20.2 | 5 / 0 | |
| 12.20.1 | 5 / 0 | |
| 12.20.0 | 5 / 0 | |
| 12.19.0 | 5 / 0 | |
| 12.18.1 | 5 / 0 | |
| 12.18.0 | 5 / 0 | |
| 12.17.3 | 5 / 0 | |
| 12.17.2 | 5 / 0 | |
| 12.17.1 | 5 / 0 | |
| 12.17.0 | 5 / 0 | |
| 12.16.2 | 5 / 0 | |
| 12.16.1 | 5 / 0 | |
| 12.16.0 | 5 / 0 | |
| 12.15.0 | 5 / 0 | |
| 12.14.0 | 5 / 0 | |
| 12.13.0 | 5 / 0 | |
| 12.12.0 | 5 / 0 | |
| 12.11.1 | 5 / 0 | |
| 12.11.0 | 5 / 0 | |
| 12.10.0 | 5 / 0 | |
| 12.9.1 | 5 / 0 | |
| 12.9.0 | 5 / 0 | |
| 12.8.1 | 5 / 0 | |
| 12.8.0 | 5 / 0 | |
| 12.7.0 | 5 / 0 | |
| 12.6.0 | 5 / 0 | |
| 12.5.0 | 5 / 0 | |
| 12.4.0 | 5 / 0 | |
| 12.3.0 | 5 / 0 |
v12.33.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.21.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.20.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.20.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.20.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.20.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.20.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.20.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.17.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.17.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.17.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.17.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.16.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.16.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.16.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.15.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.14.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.13.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.12.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.11.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.11.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.10.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.9.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.9.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.8.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.8.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.7.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.6.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.5.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.4.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.3.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.