← Home

@scalar/openapi-parser

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

cameronrohanimarclavescalar_geoffhwkrhanspagelamritkbgrcsscalar-machine

Keywords

openapiscalarswaggerparsertypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:yaml AI (phantom-deps): Core parsing dep, likely bundled into dist. ai
phantom-deps phantom-dep:@types/node AI (phantom-deps): Type-only dep, expected phantom pattern. ai
phantom-deps phantom-dep:vite AI (phantom-deps): Build tool config dep, not runtime import. ai
phantom-deps phantom-dep:@hyperjump/json-schema AI (phantom-deps): Likely bundled into dist output. ai
phantom-deps phantom-dep:@hyperjump/browser AI (phantom-deps): Likely bundled into dist output. ai
npm-metadata suspicious-initial-version AI (npm-metadata): 0.0.0 is this monorepo's convention for internal packages, not malicious signal. ai
phantom-deps phantom-dep:chalk AI (phantom-deps): Likely used in CLI/build scripts, false positive. ai
phantom-deps phantom-dep:openapi-types AI (phantom-deps): Type-only dep, false positive. ai
phantom-deps phantom-dep:@humanwhocodes/momoa AI (phantom-deps): AST parsing dep for JSON, false positive on import scan. ai
phantom-deps phantom-dep:leven AI (phantom-deps): Legit small utility dep, false positive on import scan. ai
phantom-deps phantom-dep:glob AI (phantom-deps): Legit runtime dep of OpenAPI parser, false positive on import scan. ai
phantom-deps phantom-dep:jsonpointer AI (phantom-deps): JSON pointer resolution core to OpenAPI parsing, false positive. ai
phantom-deps phantom-dep:json-to-ast AI (phantom-deps): Used for JSON parsing/AST in parser package, false positive. ai
phantom-deps phantom-dep:js-yaml AI (phantom-deps): Core YAML parsing dep for an OpenAPI parser, false positive. ai
phantom-deps phantom-dep:ajv-draft-04 AI (phantom-deps): Schema validation dep, false positive on import scan. ai
provenance publisher-changed AI (provenance): scalar_geoff is an established publisher (36 approved) within the scalar org; SLSA attestation confirms CI/CD build integrity. ai

Versions (showing 51 of 122)

View all versions
Version Deps Published
0.28.10 10 / 5
0.28.9 10 / 5
0.28.8 10 / 5
0.28.7 10 / 5
0.28.6 10 / 5
0.28.5 10 / 5
0.28.4 10 / 5
0.28.2 10 / 5
0.28.1 10 / 5
0.28.0 10 / 5
0.27.0 10 / 5
0.26.1 10 / 5
0.26.0 10 / 5
0.25.12 10 / 5
0.25.11 10 / 5
0.25.10 10 / 5
0.25.9 10 / 5
0.25.8 10 / 5
0.25.7 10 / 5
0.25.6 10 / 5
0.25.5 10 / 5
0.25.4 10 / 6
0.25.3 10 / 6
0.25.2 10 / 6
0.25.1 10 / 6
0.25.0 10 / 6
0.24.17 10 / 6
0.24.16 10 / 6
0.24.15 10 / 6
0.24.14 10 / 6
0.24.13 10 / 6
0.24.10 10 / 6
0.24.9 10 / 6
0.24.8 10 / 6
0.24.7 10 / 6
0.24.6 10 / 6
0.24.5 9 / 6
0.24.4 9 / 6
0.24.3 9 / 6
0.24.2 9 / 6
0.24.1 9 / 6
0.23.13 9 / 6
0.23.12 9 / 6
0.23.11 9 / 6
0.23.10 9 / 6
0.23.9 9 / 6
0.23.7 9 / 6
0.23.6 9 / 6
0.23.5 9 / 6
0.23.4 9 / 6
0.23.3 9 / 9

v0.28.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.28.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.