@sonamu-kit/tasks
9
Versions
—
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
No source commit
Maintainers
minsangkim
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:base64-decode | AI (semgrep): Standard cursor pagination decode pattern; not obfuscation or payload hiding. | ai | |
| phantom-deps | phantom-dep:pg | AI (phantom-deps): TypeScript library with compiled output; imports may not be directly visible to static analyzer. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): TypeScript library with compiled output; imports may not be directly visible to static analyzer. | ai | |
| phantom-deps | phantom-dep:rou3 | AI (phantom-deps): TypeScript library with compiled output; imports may not be directly visible to static analyzer. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): TypeScript library with compiled output; imports may not be directly visible to static analyzer. | ai | |
| phantom-deps | phantom-dep:date-fns | AI (phantom-deps): TypeScript library with compiled output; imports may not be directly visible to static analyzer. | ai | |
| phantom-deps | phantom-dep:node-cron | AI (phantom-deps): TypeScript library with compiled output; imports may not be directly visible to static analyzer. | ai | |
| phantom-deps | phantom-dep:date-fns-tz | AI (phantom-deps): TypeScript library with compiled output; imports may not be directly visible to static analyzer. | ai |