← Home

@spinajs/configuration

npm Repository Homepage

framework configuration module

100
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

gben-spina

Keywords

dicontainerspinajsdi

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:env-spread AI (semgrep): Configuration framework intentionally merges process.env into config object; stable design pattern across all versions. ai
provenance no-provenance AI (provenance): Established package with 456 versions; lack of provenance is consistent across all releases and not a new risk. ai

Versions (showing 100 of 403)

Version Deps Published
2.0.482 11 / 1
2.0.481 11 / 1
2.0.480 11 / 1
2.0.479 11 / 1
2.0.478 11 / 1
2.0.477 11 / 1
2.0.476 11 / 1
2.0.475 11 / 1
2.0.474 11 / 1
2.0.473 11 / 1
2.0.472 11 / 1
2.0.471 11 / 1
2.0.470 11 / 1
2.0.469 11 / 1
2.0.468 11 / 1
2.0.467 11 / 1
2.0.466 11 / 1
2.0.465 11 / 1
2.0.464 11 / 1
2.0.463 11 / 1
2.0.462 11 / 1
2.0.461 11 / 1
2.0.460 11 / 1
2.0.458 11 / 1
2.0.457 11 / 1
2.0.456 11 / 1
2.0.455 11 / 1
2.0.454 11 / 1
2.0.453 11 / 1
2.0.452 11 / 1
2.0.451 11 / 1
2.0.450 11 / 1
2.0.449 11 / 1
2.0.448 11 / 1
2.0.447 11 / 1
2.0.446 11 / 1
2.0.445 11 / 1
2.0.444 11 / 1
2.0.443 11 / 1
2.0.442 11 / 1
2.0.441 11 / 1
2.0.439 11 / 1
2.0.438 11 / 1
2.0.436 11 / 1
2.0.435 11 / 1
2.0.434 11 / 1
2.0.433 11 / 1
2.0.432 11 / 1
2.0.431 11 / 1
2.0.430 11 / 1
2.0.429 11 / 1
2.0.428 11 / 1
2.0.427 11 / 1
2.0.426 11 / 1
2.0.425 11 / 1
2.0.424 11 / 1
2.0.423 11 / 1
2.0.422 11 / 1
2.0.421 11 / 1
2.0.420 11 / 1
2.0.419 11 / 1
2.0.418 11 / 1
2.0.417 11 / 1
2.0.416 11 / 1
2.0.415 11 / 1
2.0.414 11 / 1
2.0.413 11 / 1
2.0.412 11 / 1
2.0.411 11 / 1
2.0.409 11 / 1
2.0.408 11 / 1
2.0.407 11 / 1
2.0.406 11 / 1
2.0.405 11 / 1
2.0.404 11 / 1
2.0.403 11 / 1
2.0.402 11 / 1
2.0.401 11 / 1
2.0.400 11 / 1
2.0.399 11 / 1
2.0.398 11 / 1
2.0.397 11 / 1
2.0.396 11 / 1
2.0.395 11 / 1
2.0.394 11 / 1
2.0.393 11 / 1
2.0.392 11 / 1
2.0.391 11 / 1
2.0.390 11 / 1
2.0.389 11 / 1
2.0.387 11 / 1
2.0.386 11 / 1
2.0.385 11 / 1
2.0.384 11 / 1
2.0.383 11 / 1
2.0.382 11 / 1
2.0.381 11 / 1
2.0.379 11 / 1
2.0.378 11 / 1
2.0.377 11 / 1
Showing 100 of 403 Next page →

v2.0.482

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.