@swan-io/shared-business
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): Stable for this package; provenance is uncommon in npm ecosystem. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped internal library; missing repo/description/keywords typical for monorepo packages. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Stable across 380 versions; low-risk metadata issue for established package. | ai | |
| dependencies | unvetted-dep:iban | AI (dependencies): Well-known IBAN validation library, long-standing ecosystem package. | ai | |
| dependencies | unvetted-dep:react-atomic-state | AI (dependencies): Small React state utility; no malware indicators, consistent with package purpose. | ai | |
| dependencies | unvetted-dep:@placekit/client-js | AI (dependencies): PlaceKit official JS client; consistent with address/business form use case. | ai | |
| dependencies | unvetted-dep:@swan-io/boxed | AI (dependencies): First-party swan-io dependency; same org, stable package family. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): React UI package; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:react-native-web | AI (phantom-deps): Platform-specific dep; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): Listed as runtime dep; phantom-dep heuristic false positive for this package. | ai | |
| dependencies | unvetted-dep:@swan-io/request | AI (dependencies): First-party swan-io dependency; same org, stable package family. | ai | |
| dependencies | unvetted-dep:@swan-io/use-form | AI (dependencies): First-party swan-io dependency; same org, stable package family. | ai |
Versions (showing 51 of 74)
| Version | Deps | Published |
|---|---|---|
| 15.0.0 | 12 / 9 | |
| 14.0.0 | 12 / 9 | |
| 13.12.0 | 15 / 6 | |
| 13.11.3 | 15 / 6 | |
| 13.11.2 | 15 / 6 | |
| 13.11.1 | 15 / 6 | |
| 13.11.0 | 15 / 6 | |
| 13.10.2 | 15 / 6 | |
| 13.10.1 | 15 / 6 | |
| 13.10.0 | 15 / 6 | |
| 13.9.3 | 15 / 6 | |
| 13.9.2 | 15 / 6 | |
| 13.9.1 | 15 / 6 | |
| 13.9.0 | 15 / 6 | |
| 13.8.0 | 15 / 6 | |
| 13.7.14 | 15 / 6 | |
| 13.7.13 | 15 / 6 | |
| 13.7.12 | 15 / 6 | |
| 13.7.11 | 15 / 6 | |
| 13.7.10 | 15 / 6 | |
| 13.7.9 | 15 / 6 | |
| 13.7.8 | 15 / 6 | |
| 13.7.7 | 15 / 6 | |
| 13.7.6 | 15 / 6 | |
| 13.7.5 | 15 / 6 | |
| 13.7.4 | 15 / 6 | |
| 13.7.3 | 15 / 6 | |
| 13.7.2 | 15 / 6 | |
| 13.7.1 | 15 / 6 | |
| 13.7.0 | 15 / 6 | |
| 13.6.7 | 15 / 6 | |
| 13.6.6 | 15 / 6 | |
| 13.6.5 | 15 / 6 | |
| 13.6.4 | 15 / 6 | |
| 13.6.3 | 15 / 6 | |
| 13.6.2 | 15 / 6 | |
| 13.6.1 | 15 / 6 | |
| 13.6.0 | 15 / 6 | |
| 13.5.3 | 15 / 6 | |
| 13.5.2 | 15 / 6 | |
| 13.5.1 | 15 / 6 | |
| 13.5.0 | 15 / 6 | |
| 13.4.15 | 15 / 6 | |
| 13.4.14 | 15 / 6 | |
| 13.4.13 | 15 / 6 | |
| 13.4.12 | 15 / 6 | |
| 13.4.11 | 15 / 6 | |
| 13.4.10 | 15 / 6 | |
| 13.4.9 | 15 / 6 | |
| 13.4.8 | 15 / 6 | |
| 13.4.7 | 15 / 6 |
v15.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v14.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.12.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.11.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.11.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.11.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.11.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.10.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.10.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.10.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.9.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.9.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.9.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.8.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.5.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.5.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.5.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.5.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.