← Home

@rxdi/schematics

npm
51
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

gapirxdi

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:dynamic-require AI (semgrep): Template utility pattern for optional dependency loading; stable across versions of this schematics package. ai
bogus-package bogus-package AI (bogus-package): Long-lived package (2589 days, 383 versions); sparse metadata reflects internal tooling style, not spam. ai
npm-metadata no-description AI (npm-metadata): Consistent across all versions of this established package; not a malicious indicator. ai
phantom-deps phantom-dep:chalk AI (phantom-deps): Chalk is a runtime dep used in schematics output; phantom-dep heuristic false positive for this package. ai
phantom-deps phantom-dep:@angular-devkit/schematics-cli AI (phantom-deps): schematics-cli is a legitimate runtime dep for Angular schematics tooling; phantom-dep heuristic false positive. ai
phantom-deps phantom-dep:ts-morph AI (phantom-deps): ts-morph is a runtime dep for code generation; phantom-dep heuristic false positive for this package. ai
phantom-deps phantom-dep:node-emoji AI (phantom-deps): node-emoji is a runtime dep for schematics output; phantom-dep heuristic false positive for this package. ai

Versions (showing 51 of 390)

View all versions
Version Deps Published
0.7.250 6 / 2
0.7.249 6 / 2
0.7.248 6 / 2
0.7.247 6 / 2
0.7.246 6 / 2
0.7.245 6 / 2
0.7.244 6 / 2
0.7.243 6 / 2
0.7.242 6 / 2
0.7.241 6 / 2
0.7.240 6 / 2
0.7.239 6 / 2
0.7.238 6 / 2
0.7.237 6 / 2
0.7.236 6 / 2
0.7.235 6 / 2
0.7.234 6 / 2
0.7.233 6 / 2
0.7.232 6 / 2
0.7.231 6 / 2
0.7.230 6 / 2
0.7.229 6 / 2
0.7.228 6 / 2
0.7.227 6 / 2
0.7.226 6 / 2
0.7.225 6 / 2
0.7.224 6 / 2
0.7.223 6 / 2
0.7.222 6 / 2
0.7.221 6 / 2
0.7.220 6 / 2
0.7.219 6 / 2
0.7.218 6 / 2
0.7.217 6 / 2
0.7.216 6 / 2
0.7.215 6 / 2
0.7.214 6 / 2
0.7.213 6 / 2
0.7.212 6 / 2
0.7.211 6 / 2
0.7.210 6 / 2
0.7.209 6 / 2
0.7.208 6 / 2
0.7.207 6 / 2
0.7.206 6 / 2
0.7.205 6 / 2
0.7.204 6 / 2
0.7.203 6 / 2
0.7.202 6 / 2
0.7.201 6 / 2
0.7.200 6 / 2

v0.7.250

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.