@scalar/postman-to-openapi
Converts Postman collections to OpenAPI documents
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
cameronrohanimarclavescalar_geoffhwkrhanspagelamritkbgrcsscalar-machine
Keywords
postmanopenapiswaggerconvertertransformerexportscalar
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): scalar_geoff is an established @scalar org publisher with 130 approved packages; legitimate team rotation. | ai | |
| dependencies | unvetted-dep:@scalar/oas-utils | AI (dependencies): Same-org @scalar/ scoped dependency within the scalar monorepo ecosystem; expected and benign for this package. | ai | |
| phantom-deps | phantom-dep:@scalar/oas-utils | AI (phantom-deps): Same-org dependency in a bundled monorepo package; declared deps may not be directly imported in source but are legitimate build/type dependencies. | ai | |
| dependencies | unvetted-dep:@scalar/helpers | AI (dependencies): @scalar/helpers is a first-party internal package from the same scalar/scalar monorepo; not a third-party unknown dependency. | ai | |
| dependencies | unvetted-dep:@scalar/openapi-types | AI (dependencies): @scalar/openapi-types is a first-party internal package from the same scalar/scalar monorepo; not a third-party unknown dependency. | ai |
Versions (showing 51 of 148)
| Version | Deps | Published |
|---|---|---|
| 0.7.13 | 2 / 3 | |
| 0.7.12 | 2 / 3 | |
| 0.7.11 | 2 / 3 | |
| 0.7.10 | 2 / 3 | |
| 0.7.9 | 2 / 3 | |
| 0.7.8 | 2 / 3 | |
| 0.7.7 | 2 / 3 | |
| 0.7.5 | 2 / 3 | |
| 0.7.4 | 2 / 3 | |
| 0.7.3 | 2 / 3 | |
| 0.7.2 | 2 / 3 | |
| 0.7.1 | 2 / 3 | |
| 0.7.0 | 2 / 3 | |
| 0.6.3 | 2 / 3 | |
| 0.6.2 | 2 / 2 | |
| 0.6.1 | 2 / 2 | |
| 0.6.0 | 2 / 2 | |
| 0.5.3 | 2 / 2 | |
| 0.5.2 | 2 / 3 | |
| 0.5.1 | 2 / 3 | |
| 0.5.0 | 2 / 3 | |
| 0.4.10 | 2 / 3 | |
| 0.4.9 | 2 / 3 | |
| 0.4.8 | 2 / 3 | |
| 0.4.7 | 2 / 3 | |
| 0.4.4 | 2 / 3 | |
| 0.4.3 | 2 / 3 | |
| 0.4.2 | 2 / 3 | |
| 0.4.1 | 2 / 3 | |
| 0.4.0 | 2 / 3 | |
| 0.3.60 | 2 / 1 | |
| 0.3.58 | 3 / 1 | |
| 0.3.57 | 3 / 1 | |
| 0.3.56 | 3 / 1 | |
| 0.3.55 | 3 / 1 | |
| 0.3.54 | 3 / 1 | |
| 0.3.53 | 3 / 1 | |
| 0.3.52 | 3 / 1 | |
| 0.3.49 | 3 / 1 | |
| 0.3.48 | 3 / 1 | |
| 0.3.47 | 3 / 1 | |
| 0.3.46 | 3 / 1 | |
| 0.3.45 | 3 / 1 | |
| 0.3.44 | 3 / 1 | |
| 0.3.43 | 3 / 1 | |
| 0.3.42 | 3 / 1 | |
| 0.3.41 | 3 / 1 | |
| 0.3.40 | 3 / 1 | |
| 0.3.39 | 3 / 1 | |
| 0.3.38 | 3 / 1 | |
| 0.3.36 | 3 / 1 |
v0.7.13
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.7.12
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.7.11
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.