@tachybase/test
8
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
sealdaytomyjan
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| bogus-package | bogus-package | AI (bogus-package): Internal monorepo test package, missing metadata expected not malicious. | ai | |
| dependencies | unvetted-dep:@tachybase/schema | AI (dependencies): Internal monorepo dependency; reviewed as part of the tachybase ecosystem. | ai | |
| dependencies | unvetted-dep:@tachybase/server | AI (dependencies): Internal monorepo dependency; reviewed as part of the tachybase ecosystem. | ai | |
| dependencies | unvetted-dep:mockjs | AI (dependencies): mockjs is a stable mock data library used consistently across this package's versions. | ai | |
| phantom-deps | phantom-dep:@types/supertest | AI (phantom-deps): Type-only peer dep; not directly imported by convention, stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:jsdom | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:mockjs | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai | |
| typosquat | typosquat.levenshtein:jest | AI (typosquat): Scoped monorepo package @tachybase/test; not a typosquat of jest. | ai | |
| phantom-deps | phantom-dep:pg-hstore | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:sqlite3 | AI (phantom-deps): Config-file reference; stable false positive for this package. | ai | |
| typosquat | typosquat.levenshtein:next | AI (typosquat): Scoped monorepo package; not a typosquat of next. | ai | |
| typosquat | typosquat.levenshtein:vitest | AI (typosquat): Scoped monorepo package; not a typosquat of vitest. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): 127.0.0.1 localhost test DB server helper; no exfiltration risk. | ai | |
| phantom-deps | phantom-dep:vite | AI (phantom-deps): Config-file reference in a test utility package; stable false positive. | ai |