@supernova-studio/pulsar-core No license 19 versions

@supernova-studio/pulsar-core

npm Repository Homepage

19

Versions

—

License

No

Install Scripts

Missing

Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

artufimtcevoskar_koristkasupernova-cijiritrecaksusergiiseva-supernovamatej.bobeksn-filipdanisko

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
publish-pattern	new-deps-added	AI (publish-pattern): punycode is a well-known stdlib polyfill; no malicious indicators in this addition.	ai	2026/06/04
provenance	publisher-changed	AI (provenance): Transition to GitHub Actions CI publisher is consistent with org automation; stable for this package going forward.	ai	2026/06/03
maintainer-change	maintainer-added	AI (maintainer-change): sn-filipdanisko addition aligns with the org's CI migration; no malicious indicators.	ai	2026/06/03
bogus-package	bogus-package	AI (bogus-package): Established 350-version package; sparse README/keywords are a known pattern for this SDK component.	ai	2026/06/03
phantom-deps	phantom-dep:dot-prop	AI (phantom-deps): dot-prop declared in dependencies; phantom-dep heuristic false positive.	ai	2026/05/20
phantom-deps	phantom-dep:ts-dedent	AI (phantom-deps): ts-dedent declared in dependencies; phantom-dep heuristic false positive.	ai	2026/05/20
phantom-deps	phantom-dep:jsep	AI (phantom-deps): jsep is declared in dependencies and used via config; phantom-dep heuristic false positive for this package.	ai	2026/05/20
phantom-deps	phantom-dep:@jsep-plugin/object	AI (phantom-deps): @jsep-plugin/object declared in dependencies; phantom-dep heuristic false positive.	ai	2026/05/20
phantom-deps	phantom-dep:@jsep-plugin/ternary	AI (phantom-deps): @jsep-plugin/ternary declared in dependencies; phantom-dep heuristic false positive.	ai	2026/05/20
phantom-deps	phantom-dep:async-mutex	AI (phantom-deps): async-mutex declared in dependencies; phantom-dep heuristic false positive.	ai	2026/05/20
phantom-deps	phantom-dep:uuid	AI (phantom-deps): uuid declared in dependencies; phantom-dep heuristic false positive.	ai	2026/05/20
phantom-deps	phantom-dep:lodash	AI (phantom-deps): lodash declared in dependencies; phantom-dep heuristic false positive.	ai	2026/05/20
phantom-deps	phantom-dep:moment	AI (phantom-deps): moment declared in dependencies; phantom-dep heuristic false positive.	ai	2026/05/20

Versions (showing 19 of 119)

Version	Deps	Published
2.3.16	24 / 27	2024-08-23
2.3.15	24 / 27	2024-08-13
2.3.14	24 / 27	2024-08-12
2.3.13	24 / 27	2024-08-12
2.3.12	24 / 27	2024-08-12
2.3.11	24 / 27	2024-08-12
2.3.10	24 / 27	2024-08-12
2.3.9	24 / 27	2024-08-09
2.3.8	24 / 27	2024-08-09
2.3.7	24 / 27	2024-08-07
2.3.6	24 / 27	2024-08-02
2.3.5	24 / 27	2024-07-30
2.3.4	24 / 27	2024-07-25
2.3.3	24 / 30	2024-07-18
2.3.2	24 / 30	2024-06-21
2.3.1	24 / 30	2024-06-07
2.3.0	24 / 30	2024-06-04
2.2.7	24 / 30	2024-06-04
2.2.4	24 / 30	2024-05-31

v2.3.16

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.15

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.14

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.13

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.12

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.10

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.2.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.2.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.