@reltio/mdm-sdk
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:immer | AI (phantom-deps): SDK bundle pattern; deps referenced in config files, not direct imports. Stable for this package. | ai | |
| phantom-deps | phantom-dep:reselect | AI (phantom-deps): SDK bundle pattern; deps referenced in config files, not direct imports. Stable for this package. | ai | |
| phantom-deps | phantom-dep:color-hash | AI (phantom-deps): SDK bundle pattern; deps referenced in config files, not direct imports. Stable for this package. | ai | |
| phantom-deps | phantom-dep:decimal.js | AI (phantom-deps): SDK bundle pattern; deps referenced in config files, not direct imports. Stable for this package. | ai | |
| phantom-deps | phantom-dep:memoize-one | AI (phantom-deps): SDK bundle pattern; deps referenced in config files, not direct imports. Stable for this package. | ai | |
| phantom-deps | phantom-dep:re-reselect | AI (phantom-deps): SDK bundle pattern; deps referenced in config files, not direct imports. Stable for this package. | ai | |
| phantom-deps | phantom-dep:@reltio-lab/utils | AI (phantom-deps): SDK bundle pattern; deps referenced in config files, not direct imports. Stable for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Private enterprise SDK; sparse metadata is expected, not a spam indicator given age and ecosystem usage. | ai |
Versions (showing 51 of 181)
| Version | Deps | Published |
|---|---|---|
| 1.4.2059 | 7 / 0 | |
| 1.4.2057 | 7 / 0 | |
| 1.4.2056 | 7 / 0 | |
| 1.4.2055 | 7 / 0 | |
| 1.4.2054 | 7 / 0 | |
| 1.4.2053 | 7 / 0 | |
| 1.4.2052 | 7 / 0 | |
| 1.4.2051 | 7 / 0 | |
| 1.4.2049 | 7 / 0 | |
| 1.4.2048 | 7 / 0 | |
| 1.4.2047 | 7 / 0 | |
| 1.4.2046 | 7 / 0 | |
| 1.4.2045 | 7 / 0 | |
| 1.4.2044 | 7 / 0 | |
| 1.4.2043 | 7 / 0 | |
| 1.4.2041 | 7 / 0 | |
| 1.4.2039 | 7 / 0 | |
| 1.4.2033 | 7 / 0 | |
| 1.4.2025 | 7 / 0 | |
| 1.4.2016 | 7 / 0 | |
| 1.4.2012 | 7 / 0 | |
| 1.4.2011 | 7 / 0 | |
| 1.4.2007 | 7 / 0 | |
| 1.4.2006 | 7 / 0 | |
| 1.4.2005 | 7 / 0 | |
| 1.4.2004 | 7 / 0 | |
| 1.4.2003 | 7 / 0 | |
| 1.4.2002 | 7 / 0 | |
| 1.4.2001 | 7 / 0 | |
| 1.4.2000 | 7 / 0 | |
| 1.4.1999 | 7 / 0 | |
| 1.4.1998 | 7 / 0 | |
| 1.4.1997 | 7 / 0 | |
| 1.4.1996 | 7 / 0 | |
| 1.4.1995 | 7 / 0 | |
| 1.4.1994 | 7 / 0 | |
| 1.4.1993 | 7 / 0 | |
| 1.4.1992 | 7 / 0 | |
| 1.4.1991 | 7 / 0 | |
| 1.4.1990 | 7 / 0 | |
| 1.4.1989 | 7 / 0 | |
| 1.4.1988 | 7 / 0 | |
| 1.4.1987 | 7 / 0 | |
| 1.4.1986 | 7 / 0 | |
| 1.4.1985 | 7 / 0 | |
| 1.4.1984 | 7 / 0 | |
| 1.4.1983 | 7 / 0 | |
| 1.4.1982 | 7 / 0 | |
| 1.4.1981 | 7 / 0 | |
| 1.4.1980 | 7 / 0 | |
| 1.4.1979 | 7 / 0 |
v1.4.2059
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.2057
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.2056
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.2055
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.2054
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.2053
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.