@sebbo2002/tgtg-ical
A small server that receives mails from TGTG, parses them and generates an iCal feed from them.
17
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
sebbo2002
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@criblinc/docker-names | AI (dependencies): docker-names is a benign name-generation utility; stable dependency across versions of this package. | ai | |
| phantom-deps | phantom-dep:@prisma/client | AI (phantom-deps): Prisma client is a runtime dep used via Prisma schema config, not direct import; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:express | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this compiled package. | ai | |
| phantom-deps | phantom-dep:mailparser | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this compiled package. | ai | |
| phantom-deps | phantom-dep:@sentry/node | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this compiled package. | ai | |
| phantom-deps | phantom-dep:cookie-parser | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this compiled package. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Prisma internal WASM loader pattern; decodes bundled query engine binary, not user input. | ai | |
| phantom-deps | phantom-dep:moment-timezone | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this compiled package. | ai | |
| phantom-deps | phantom-dep:@criblinc/docker-names | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this compiled package. | ai | |
| phantom-deps | phantom-dep:@prisma/adapter-mariadb | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this compiled package. | ai | |
| phantom-deps | phantom-dep:ical-generator | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this compiled package. | ai | |
| phantom-deps | phantom-dep:he | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this compiled package. | ai |