@stigg/sidecar
Stigg sidecar
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:yn | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:pino | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:dotenv | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:undici | AI (phantom-deps): Known implicit runtime dependency; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:fastify | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:fastify-metrics | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@bufbuild/protobuf | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@connectrpc/connect | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@stigg/node-server-sdk | AI (phantom-deps): Same org scope; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@connectrpc/connect-node | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai | |
| phantom-deps | phantom-dep:@connectrpc/connect-fastify | AI (phantom-deps): Config-file reference pattern; stable false positive for this sidecar package. | ai |
Versions (showing 100 of 254)
| Version | Deps | Published |
|---|---|---|
| 7.116.2 | 10 / 7 | |
| 7.116.0 | 10 / 7 | |
| 7.115.3 | 10 / 7 | |
| 7.115.2 | 10 / 7 | |
| 7.115.1 | 10 / 7 | |
| 7.113.4 | 10 / 7 | |
| 7.113.3 | 10 / 7 | |
| 7.113.1 | 10 / 7 | |
| 7.113.0 | 10 / 7 | |
| 7.112.4 | 10 / 7 | |
| 7.112.2 | 10 / 7 | |
| 7.112.0 | 10 / 7 | |
| 7.111.1 | 10 / 7 | |
| 7.111.0 | 10 / 7 | |
| 7.110.0 | 10 / 7 | |
| 7.109.0 | 10 / 7 | |
| 7.107.10 | 10 / 7 | |
| 7.107.9 | 10 / 7 | |
| 7.107.8 | 10 / 7 | |
| 7.107.7 | 10 / 7 | |
| 7.107.6 | 10 / 7 | |
| 7.107.5 | 10 / 7 | |
| 7.107.3 | 10 / 7 | |
| 7.107.2 | 10 / 7 | |
| 7.107.1 | 10 / 7 | |
| 7.107.0 | 10 / 7 | |
| 7.106.0 | 10 / 7 | |
| 7.104.1 | 10 / 7 | |
| 7.104.0 | 10 / 7 | |
| 7.102.0 | 10 / 7 | |
| 7.101.2 | 10 / 7 | |
| 7.101.1 | 10 / 7 | |
| 7.101.0 | 10 / 7 | |
| 7.100.1 | 10 / 7 | |
| 7.100.0 | 10 / 7 | |
| 7.99.1 | 10 / 7 | |
| 7.97.4 | 10 / 7 | |
| 7.97.2 | 10 / 7 | |
| 7.96.1 | 10 / 7 | |
| 7.96.0 | 10 / 7 | |
| 7.95.0 | 10 / 7 | |
| 7.93.1 | 10 / 7 | |
| 7.93.0 | 10 / 7 | |
| 7.91.0 | 10 / 7 | |
| 7.90.1 | 10 / 7 | |
| 7.90.0 | 10 / 7 | |
| 7.88.2 | 10 / 7 | |
| 7.88.1 | 10 / 7 | |
| 7.87.3 | 10 / 7 | |
| 7.87.2 | 10 / 7 | |
| 7.87.1 | 10 / 7 | |
| 7.87.0 | 10 / 7 | |
| 7.86.2 | 10 / 7 | |
| 7.86.1 | 10 / 7 | |
| 7.86.0 | 10 / 7 | |
| 7.85.0 | 10 / 7 | |
| 7.84.0 | 10 / 7 | |
| 7.83.0 | 10 / 7 | |
| 7.82.0 | 10 / 7 | |
| 7.81.0 | 10 / 7 | |
| 7.80.3 | 10 / 7 | |
| 7.80.2 | 10 / 7 | |
| 7.80.0 | 10 / 7 | |
| 7.79.0 | 10 / 7 | |
| 7.78.0 | 10 / 7 | |
| 7.77.4 | 10 / 7 | |
| 7.77.3 | 10 / 7 | |
| 7.77.2 | 10 / 7 | |
| 7.77.1 | 10 / 7 | |
| 7.77.0 | 10 / 7 | |
| 7.75.3 | 10 / 7 | |
| 7.75.2 | 10 / 7 | |
| 7.75.1 | 10 / 7 | |
| 7.75.0 | 10 / 7 | |
| 7.73.0 | 10 / 7 | |
| 7.72.1 | 10 / 7 | |
| 7.72.0 | 10 / 7 | |
| 7.71.2 | 10 / 7 | |
| 7.71.1 | 10 / 7 | |
| 7.70.1 | 10 / 7 | |
| 7.70.0 | 10 / 7 | |
| 7.69.0 | 10 / 7 | |
| 7.68.0 | 10 / 7 | |
| 7.66.0 | 10 / 7 | |
| 7.65.0 | 10 / 7 | |
| 7.64.2 | 10 / 7 | |
| 7.64.1 | 10 / 7 | |
| 7.64.0 | 10 / 7 | |
| 7.63.0 | 10 / 7 | |
| 7.62.1 | 10 / 7 | |
| 7.62.0 | 10 / 7 | |
| 7.61.1 | 10 / 7 | |
| 7.61.0 | 10 / 7 | |
| 7.60.0 | 10 / 7 | |
| 7.59.0 | 10 / 7 | |
| 7.58.0 | 10 / 7 | |
| 7.57.0 | 10 / 7 | |
| 7.56.0 | 10 / 7 | |
| 7.54.0 | 10 / 7 | |
| 7.53.1 | 10 / 7 |
v7.116.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.116.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.115.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.115.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.115.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.113.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.113.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.113.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.113.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.112.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.112.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.112.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.111.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.111.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.110.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.109.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.107.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.106.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.104.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.104.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.102.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.101.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.101.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.101.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.100.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.100.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.99.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.97.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.97.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.96.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.96.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.95.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.93.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.93.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.91.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.90.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.90.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.88.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.88.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.87.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.87.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.87.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.87.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.86.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.86.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.86.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.85.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.84.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.83.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.82.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.81.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.80.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.80.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.80.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.79.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.78.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.77.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.77.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.77.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.77.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.77.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.75.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.75.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.75.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.75.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.