@sinonjs/samsam
Value identification and comparison functions
48
Versions
BSD-3-Clause
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
mrgnrdrckfatso83mantonicjohansenbenjamin.gruenbaumsimenb
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): lodash.get, type-detect, and @sinonjs/commons are all established, widely-trusted packages appropriate for a value comparison library. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): peer5 removal is part of the same documented sinonjs org maintainer transition; no evidence of malicious takeover. | ai | |
| source-diff | large-new-source-files | AI (source-diff): v7.0.0 is a major version with significant restructuring and TypeScript type generation; 43 new files is consistent with a legitimate refactor. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): benjamin.gruenbaum and simenb are well-known JS testing community contributors; this is a documented sinonjs org transition, not a takeover. | ai | |
| phantom-deps | phantom-dep:@sinonjs/formatio | AI (phantom-deps): @sinonjs/formatio is from the same org scope and its indirect use pattern is expected in the Sinon.js ecosystem. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher change from mantoni to mrgnrdrck in 2020 is a documented Sinon.js org maintainer transition; mrgnrdrck has strong track record (63 approved, 0 rejected). Stable for this package. | ai | |
| dependencies | unvetted-dep:@sinonjs/commons | AI (dependencies): @sinonjs/commons is a core sinonjs ecosystem package and a stable, legitimate dependency of samsam across many versions. Not a real risk. | ai | |
| provenance | no-provenance | AI (provenance): Established sinonjs ecosystem package; lack of provenance is common and not a meaningful risk signal here. | ai |
Versions (showing 48 of 48)
| Version | Deps | Published |
|---|---|---|
| 10.0.2 | 2 / 23 | |
| 10.0.1 | 2 / 22 | |
| 10.0.0 | 2 / 22 | |
| 9.0.3 | 2 / 22 | |
| 9.0.2 | 2 / 22 | |
| 9.0.1 | 2 / 22 | |
| 9.0.0 | 2 / 22 | |
| 8.0.3 | 2 / 20 | |
| 8.0.2 | 3 / 20 | |
| 8.0.1 | 3 / 20 | |
| 8.0.0 | 3 / 20 | |
| 7.0.1 | 3 / 20 | |
| 7.0.0 | 3 / 20 | |
| 6.1.3 | 3 / 20 | |
| 6.1.2 | 3 / 20 | |
| 6.1.1 | 3 / 21 | |
| 6.1.0 | 3 / 21 | |
| 6.0.2 | 3 / 21 | |
| 6.0.1 | 3 / 21 | |
| 6.0.0 | 3 / 21 | |
| 5.3.1 | 3 / 27 | |
| 5.3.0 | 3 / 30 | |
| 5.2.0 | 3 / 29 | |
| 5.1.0 | 3 / 29 | |
| 5.0.3 | 3 / 29 | |
| 5.0.2 | 4 / 29 | |
| 5.0.1 | 3 / 29 | |
| 5.0.0 | 3 / 29 | |
| 4.2.2 | 3 / 29 | |
| 4.2.1 | 3 / 29 | |
| 4.2.0 | 3 / 27 | |
| 4.1.0 | 3 / 27 | |
| 4.0.1 | 3 / 27 | |
| 3.3.3 | 3 / 21 | |
| 3.3.2 | 3 / 21 | |
| 3.3.1 | 3 / 21 | |
| 3.3.0 | 3 / 21 | |
| 3.2.0 | 3 / 21 | |
| 3.1.1 | 3 / 21 | |
| 3.1.0 | 3 / 21 | |
| 3.0.2 | 3 / 21 | |
| 3.0.1 | 3 / 21 | |
| 3.0.0 | 3 / 21 | |
| 2.1.3 | 0 / 21 | |
| 2.1.2 | 0 / 21 | |
| 2.1.1 | 1 / 20 | |
| 2.1.0 | 1 / 20 | |
| 2.0.0 | 0 / 15 |