@sebspark/logging
A pubsub subscriber helper.
16
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
johanobrinkbelievericlown
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-removed | AI (maintainer-change): CI/CD publishing with SLSA provenance; removal consistent with org-level automation replacing individual maintainers. | ai | |
| dependencies | unvetted-dep:socketio-wildcard | AI (dependencies): socketio-wildcard is a small, pinned utility used alongside socket.io in this logging package; no known advisories and stable usage pattern. | ai | |
| phantom-deps | phantom-dep:winston-transport | AI (phantom-deps): winston-transport used for type extension; stable false positive for this logging package. | ai | |
| phantom-deps | phantom-dep:express | AI (phantom-deps): Logging middleware that wraps express; declared as peer/runtime dep, not directly imported at top level. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Legitimate internal monorepo package from seb-oss/Spark-packages; sparse README is expected for internal tooling. | ai | |
| phantom-deps | phantom-dep:@types/express-serve-static-core | AI (phantom-deps): Type-only dependency loaded by convention for express type augmentation; stable false positive. | ai | |
| phantom-deps | phantom-dep:logform | AI (phantom-deps): logform is a winston sub-dependency used for type augmentation; stable false positive for this package. | ai |