@salesforce/lds-adapters-cdp-data-transform
CRUD API for CDP data transforms
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): salesforce-admin addition consistent with Salesforce org-level npm management consolidation. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Mass removal of individual Salesforce employees in favor of org account is a known Salesforce npm consolidation pattern. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy followed by org-account migration is consistent with Salesforce's internal tooling consolidation, not a takeover. | ai | |
| provenance | publisher-changed | AI (provenance): lwc-admin is a known Salesforce org account with strong approval history; transition from individual dev account is expected for org-managed packages. | ai | |
| phantom-deps | phantom-dep:@salesforce/lds-bindings | AI (phantom-deps): Same-org sibling dep in Salesforce LDS monorepo; declared but used indirectly via build artifacts, stable FP for this package. | ai |
Versions (showing 22 of 122)
| Version | Deps | Published |
|---|---|---|
| 1.360.1 | 1 / 1 | |
| 1.360.0 | 1 / 1 | |
| 1.359.0 | 1 / 1 | |
| 1.358.0 | 1 / 1 | |
| 1.357.0 | 1 / 1 | |
| 1.356.0 | 1 / 1 | |
| 1.355.0 | 1 / 1 | |
| 1.354.0 | 1 / 1 | |
| 1.353.1 | 1 / 1 | |
| 1.353.0 | 1 / 1 | |
| 1.352.0 | 1 / 1 | |
| 1.351.1 | 1 / 1 | |
| 1.351.0 | 1 / 1 | |
| 1.350.0 | 1 / 1 | |
| 1.349.0 | 1 / 1 | |
| 1.348.1 | 1 / 1 | |
| 1.348.0 | 1 / 1 | |
| 1.347.1 | 1 / 1 | |
| 1.347.0 | 1 / 1 | |
| 1.346.0 | 1 / 1 | |
| 1.345.0 | 1 / 1 | |
| 1.344.0 | 1 / 1 |
v1.359.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.358.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.357.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.356.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.355.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.354.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.353.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.353.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.352.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.351.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.351.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.350.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.349.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.348.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.348.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.347.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.347.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.346.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.345.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.344.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.