← Home

@spinajs/configuration

npm Repository Homepage

framework configuration module

51
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

gben-spina

Keywords

dicontainerspinajsdi

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:env-spread AI (semgrep): Configuration framework intentionally merges process.env into config object; stable design pattern across all versions. ai
provenance no-provenance AI (provenance): Established package with 456 versions; lack of provenance is consistent across all releases and not a new risk. ai

Versions (showing 51 of 402)

View all versions
Version Deps Published
2.0.481 11 / 1
2.0.480 11 / 1
2.0.479 11 / 1
2.0.478 11 / 1
2.0.477 11 / 1
2.0.476 11 / 1
2.0.475 11 / 1
2.0.474 11 / 1
2.0.473 11 / 1
2.0.472 11 / 1
2.0.471 11 / 1
2.0.470 11 / 1
2.0.469 11 / 1
2.0.468 11 / 1
2.0.467 11 / 1
2.0.466 11 / 1
2.0.465 11 / 1
2.0.464 11 / 1
2.0.463 11 / 1
2.0.462 11 / 1
2.0.461 11 / 1
2.0.460 11 / 1
2.0.458 11 / 1
2.0.457 11 / 1
2.0.456 11 / 1
2.0.455 11 / 1
2.0.454 11 / 1
2.0.453 11 / 1
2.0.452 11 / 1
2.0.451 11 / 1
2.0.450 11 / 1
2.0.449 11 / 1
2.0.448 11 / 1
2.0.447 11 / 1
2.0.446 11 / 1
2.0.445 11 / 1
2.0.444 11 / 1
2.0.443 11 / 1
2.0.442 11 / 1
2.0.441 11 / 1
2.0.439 11 / 1
2.0.438 11 / 1
2.0.436 11 / 1
2.0.435 11 / 1
2.0.434 11 / 1
2.0.433 11 / 1
2.0.432 11 / 1
2.0.431 11 / 1
2.0.430 11 / 1
2.0.429 11 / 1
2.0.428 11 / 1