@secondlayer/shared
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:kysely-postgres-js | AI (dependencies): kysely-postgres-js is a legitimate PostgreSQL adapter for Kysely; its use is consistent with this package's database utility purpose and is pinned to a specific version. | ai |
Versions (showing 51 of 115)
| Version | Deps | Published |
|---|---|---|
| 7.2.2 | 5 / 2 | |
| 7.2.0 | 5 / 2 | |
| 7.1.0 | 5 / 2 | |
| 7.0.3 | 5 / 2 | |
| 7.0.2 | 5 / 2 | |
| 7.0.1 | 5 / 2 | |
| 7.0.0 | 5 / 2 | |
| 6.41.3 | 5 / 2 | |
| 6.41.2 | 5 / 2 | |
| 6.41.1 | 5 / 2 | |
| 6.41.0 | 5 / 2 | |
| 6.40.1 | 5 / 2 | |
| 6.40.0 | 5 / 2 | |
| 6.39.0 | 5 / 2 | |
| 6.38.0 | 5 / 2 | |
| 6.37.1 | 5 / 2 | |
| 6.37.0 | 5 / 2 | |
| 6.36.0 | 5 / 2 | |
| 6.35.1 | 5 / 2 | |
| 6.35.0 | 5 / 2 | |
| 6.34.0 | 5 / 2 | |
| 6.33.3 | 5 / 2 | |
| 6.33.2 | 5 / 2 | |
| 6.33.1 | 5 / 2 | |
| 6.33.0 | 5 / 2 | |
| 6.32.0 | 5 / 2 | |
| 6.31.0 | 5 / 2 | |
| 6.30.0 | 5 / 2 | |
| 6.29.0 | 5 / 2 | |
| 6.28.1 | 5 / 2 | |
| 6.28.0 | 5 / 2 | |
| 6.27.0 | 5 / 2 | |
| 6.26.0 | 5 / 2 | |
| 6.25.0 | 5 / 2 | |
| 6.24.0 | 5 / 2 | |
| 6.23.0 | 5 / 2 | |
| 6.22.0 | 5 / 2 | |
| 6.21.0 | 5 / 2 | |
| 6.20.0 | 5 / 2 | |
| 6.19.0 | 5 / 2 | |
| 6.18.0 | 5 / 2 | |
| 6.17.0 | 5 / 2 | |
| 6.16.0 | 5 / 2 | |
| 6.15.0 | 5 / 2 | |
| 6.14.1 | 5 / 2 | |
| 6.14.0 | 5 / 2 | |
| 6.13.0 | 5 / 2 | |
| 6.12.0 | 5 / 2 | |
| 6.11.0 | 5 / 2 | |
| 6.10.0 | 5 / 2 | |
| 6.9.0 | 5 / 2 |
v7.2.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.2.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.0.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.0.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.0.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.0.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.41.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.41.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.41.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.41.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.40.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.40.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.39.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.38.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.37.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.