@stigg/sidecar
Stigg sidecar
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:yn | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:pino | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:dotenv | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:undici | AI (phantom-deps): Known implicit runtime dependency; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:fastify | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:fastify-metrics | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@bufbuild/protobuf | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@connectrpc/connect | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@stigg/node-server-sdk | AI (phantom-deps): Same org scope; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@connectrpc/connect-node | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@connectrpc/connect-fastify | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai |
Versions (showing 51 of 254)
| Version | Deps | Published |
|---|---|---|
| 7.116.2 | 10 / 7 | |
| 7.116.0 | 10 / 7 | |
| 7.115.3 | 10 / 7 | |
| 7.115.2 | 10 / 7 | |
| 7.115.1 | 10 / 7 | |
| 7.113.4 | 10 / 7 | |
| 7.113.3 | 10 / 7 | |
| 7.113.1 | 10 / 7 | |
| 7.113.0 | 10 / 7 | |
| 7.112.4 | 10 / 7 | |
| 7.112.2 | 10 / 7 | |
| 7.112.0 | 10 / 7 | |
| 7.111.1 | 10 / 7 | |
| 7.111.0 | 10 / 7 | |
| 7.110.0 | 10 / 7 | |
| 7.109.0 | 10 / 7 | |
| 7.107.10 | 10 / 7 | |
| 7.107.9 | 10 / 7 | |
| 7.107.8 | 10 / 7 | |
| 7.107.7 | 10 / 7 | |
| 7.107.6 | 10 / 7 | |
| 7.107.5 | 10 / 7 | |
| 7.107.3 | 10 / 7 | |
| 7.107.2 | 10 / 7 | |
| 7.107.1 | 10 / 7 | |
| 7.107.0 | 10 / 7 | |
| 7.106.0 | 10 / 7 | |
| 7.104.1 | 10 / 7 | |
| 7.104.0 | 10 / 7 | |
| 7.102.0 | 10 / 7 | |
| 7.101.2 | 10 / 7 | |
| 7.101.1 | 10 / 7 | |
| 7.101.0 | 10 / 7 | |
| 7.100.1 | 10 / 7 | |
| 7.100.0 | 10 / 7 | |
| 7.99.1 | 10 / 7 | |
| 7.97.4 | 10 / 7 | |
| 7.97.2 | 10 / 7 | |
| 7.96.1 | 10 / 7 | |
| 7.96.0 | 10 / 7 | |
| 7.95.0 | 10 / 7 | |
| 7.93.1 | 10 / 7 | |
| 7.93.0 | 10 / 7 | |
| 7.91.0 | 10 / 7 | |
| 7.90.1 | 10 / 7 | |
| 7.90.0 | 10 / 7 | |
| 7.88.2 | 10 / 7 | |
| 7.88.1 | 10 / 7 | |
| 7.87.3 | 10 / 7 | |
| 7.87.2 | 10 / 7 | |
| 7.87.1 | 10 / 7 |
v7.116.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.116.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.115.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.115.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.115.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.113.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.113.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.113.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.113.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.112.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.112.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.112.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.111.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.111.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.110.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.109.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.106.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.104.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.104.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.102.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.101.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.101.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.101.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.100.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.100.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.99.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.97.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.97.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.96.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.96.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.95.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.93.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.93.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.91.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.90.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.90.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.88.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.88.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.87.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.87.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.87.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.