@supernova-studio/client
Supernova Data Models
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:etc-passwd-access | AI (semgrep): Flagged line is a test fixture string for directory traversal validation, not actual /etc/passwd access. | ai | |
| phantom-deps | phantom-dep:y-protocols | AI (phantom-deps): y-protocols is a peer/transitive dep of yjs ecosystem; phantom detection is a stable false positive here. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): 816-version history and 2 approved dependents indicate legitimate active SDK; single dormancy gap is not anomalous. | ai | |
| phantom-deps | phantom-dep:yjs | AI (phantom-deps): yjs is a declared runtime dep used transitively; phantom-dep heuristic fires but it's a legitimate dependency. | ai | |
| phantom-deps | phantom-dep:queue-promise | AI (phantom-deps): queue-promise is a declared runtime dep; phantom-dep heuristic is a false positive for this package. | ai |
Versions (showing 70 of 170)
| Version | Deps | Published |
|---|---|---|
| 1.69.2 | 6 / 2 | |
| 1.69.1 | 6 / 2 | |
| 1.69.0 | 6 / 2 | |
| 1.68.0 | 6 / 2 | |
| 1.67.1 | 6 / 2 | |
| 1.67.0 | 6 / 2 | |
| 1.66.0 | 6 / 2 | |
| 1.65.4 | 6 / 2 | |
| 1.65.3 | 6 / 2 | |
| 1.65.2 | 6 / 2 | |
| 1.65.1 | 6 / 2 | |
| 1.65.0 | 6 / 2 | |
| 1.64.0 | 6 / 2 | |
| 1.63.0 | 6 / 2 | |
| 1.62.0 | 6 / 2 | |
| 1.61.0 | 6 / 2 | |
| 1.60.3 | 6 / 2 | |
| 1.60.2 | 6 / 2 | |
| 1.60.1 | 6 / 2 | |
| 1.60.0 | 6 / 2 | |
| 1.59.0 | 6 / 2 | |
| 1.58.0 | 6 / 2 | |
| 1.57.1 | 6 / 2 | |
| 1.57.0 | 6 / 2 | |
| 1.56.1 | 6 / 2 | |
| 1.56.0 | 6 / 2 | |
| 1.55.4 | 6 / 2 | |
| 1.55.3 | 6 / 2 | |
| 1.55.2 | 6 / 2 | |
| 1.55.1 | 6 / 2 | |
| 1.55.0 | 6 / 2 | |
| 1.54.0 | 6 / 2 | |
| 1.53.0 | 6 / 2 | |
| 1.52.4 | 6 / 2 | |
| 1.52.3 | 6 / 2 | |
| 1.52.2 | 6 / 2 | |
| 1.52.1 | 6 / 2 | |
| 1.52.0 | 6 / 2 | |
| 1.51.0 | 6 / 2 | |
| 1.50.6 | 6 / 2 | |
| 1.50.5 | 6 / 2 | |
| 1.50.4 | 6 / 2 | |
| 1.50.3 | 6 / 2 | |
| 1.50.2 | 6 / 2 | |
| 1.50.1 | 6 / 2 | |
| 1.50.0 | 6 / 2 | |
| 1.49.1 | 6 / 2 | |
| 1.49.0 | 6 / 2 | |
| 1.48.21 | 6 / 2 | |
| 1.48.20 | 6 / 2 | |
| 1.48.19 | 6 / 2 | |
| 1.48.18 | 6 / 2 | |
| 1.48.17 | 6 / 2 | |
| 1.48.16 | 6 / 2 | |
| 1.48.15 | 6 / 2 | |
| 1.48.14 | 6 / 2 | |
| 1.48.13 | 6 / 2 | |
| 1.48.12 | 6 / 2 | |
| 1.48.11 | 6 / 2 | |
| 1.48.10 | 6 / 2 | |
| 1.48.9 | 6 / 2 | |
| 1.48.8 | 6 / 2 | |
| 1.48.7 | 6 / 2 | |
| 1.48.6 | 6 / 2 | |
| 1.48.5 | 6 / 2 | |
| 1.48.4 | 6 / 2 | |
| 1.48.3 | 6 / 2 | |
| 1.48.2 | 6 / 2 | |
| 1.48.1 | 6 / 2 | |
| 1.48.0 | 6 / 2 |
v1.69.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.69.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.69.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.68.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.67.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.67.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.66.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.63.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.62.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.61.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.60.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.60.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.60.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.60.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.59.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.58.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.57.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.57.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.56.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.56.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.55.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.55.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.55.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.55.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.55.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.54.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.52.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.52.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.52.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.52.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.52.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.51.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.21
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.20
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.19
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.16
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.15
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.14
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.48.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.