@salesforce/plugin-telemetry
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:silent-process-exec | AI (semgrep): Telemetry plugin spawns a background Node process to upload telemetry data asynchronously — expected and documented behavior for this package. | ai | |
| semgrep | semgrep:silent-process-exec-var | AI (semgrep): Same spawn call as silent-process-exec; legitimate async telemetry upload pattern for this Salesforce CLI plugin. | ai | |
| semgrep | semgrep:env-bulk-read | AI (semgrep): Filters process.env for SF/SFDX-prefixed vars via isOurEnv; standard config gathering for a Salesforce CLI telemetry plugin. | ai |
Versions (showing 51 of 147)
| Version | Deps | Published |
|---|---|---|
| 3.8.32 | 7 / 10 | |
| 3.8.31 | 7 / 10 | |
| 3.8.30 | 7 / 10 | |
| 3.8.29 | 7 / 10 | |
| 3.8.28 | 7 / 10 | |
| 3.8.27 | 7 / 10 | |
| 3.8.26 | 7 / 10 | |
| 3.8.25 | 7 / 10 | |
| 3.8.24 | 7 / 10 | |
| 3.8.23 | 7 / 10 | |
| 3.8.21 | 7 / 10 | |
| 3.8.20 | 7 / 10 | |
| 3.8.19 | 7 / 10 | |
| 3.8.18 | 7 / 10 | |
| 3.8.17 | 7 / 10 | |
| 3.8.16 | 7 / 10 | |
| 3.8.15 | 7 / 10 | |
| 3.8.14 | 7 / 10 | |
| 3.8.13 | 7 / 10 | |
| 3.8.12 | 7 / 10 | |
| 3.8.11 | 7 / 10 | |
| 3.8.10 | 7 / 10 | |
| 3.8.9 | 7 / 10 | |
| 3.8.8 | 7 / 10 | |
| 3.8.7 | 7 / 10 | |
| 3.8.6 | 7 / 10 | |
| 3.8.5 | 7 / 10 | |
| 3.8.4 | 7 / 10 | |
| 3.8.3 | 7 / 10 | |
| 3.8.2 | 7 / 10 | |
| 3.8.1 | 7 / 10 | |
| 3.8.0 | 7 / 10 | |
| 3.7.3 | 7 / 10 | |
| 3.7.2 | 7 / 10 | |
| 3.7.1 | 7 / 10 | |
| 3.7.0 | 7 / 10 | |
| 3.6.71 | 7 / 10 | |
| 3.6.70 | 7 / 10 | |
| 3.6.69 | 7 / 10 | |
| 3.6.68 | 7 / 10 | |
| 3.6.67 | 7 / 10 | |
| 3.6.66 | 7 / 10 | |
| 3.6.65 | 7 / 10 | |
| 3.6.64 | 7 / 10 | |
| 3.6.63 | 7 / 10 | |
| 3.6.62 | 7 / 10 | |
| 3.6.61 | 7 / 10 | |
| 3.6.60 | 7 / 10 | |
| 3.6.58 | 7 / 10 | |
| 3.6.57 | 7 / 10 | |
| 3.6.56 | 7 / 10 |
v3.8.32
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.8.31
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.8.30
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.8.29
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.8.28
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.