← Home

@tachybase/utils

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sealdaytomyjan

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:object-path AI (phantom-deps): Listed as a runtime dependency; phantom-dep heuristic false positive for this package. ai
phantom-deps phantom-dep:flat-to-nested AI (phantom-deps): Listed as a runtime dependency; phantom-dep heuristic false positive for this package. ai
bogus-package bogus-package AI (bogus-package): Scoped monorepo package; missing description/keywords/repo URL is common for internal packages with 54 approved dependents. ai
semgrep semgrep:dynamic-require AI (semgrep): requireModule() is an intentional module-loader helper; stable pattern across versions. ai
npm-metadata no-description AI (npm-metadata): Monorepo utility package; missing description is cosmetic, not a malware indicator. ai

Versions (showing 51 of 106)

View all versions
Version Deps Published
1.6.16 8 / 4
1.6.15 8 / 4
1.6.14 8 / 4
1.6.13 8 / 4
1.6.12 8 / 4
1.6.11 8 / 4
1.6.10 8 / 4
1.6.9 8 / 4
1.6.3 8 / 4
1.6.2 8 / 4
1.6.1 8 / 4
1.6.0 8 / 4
1.3.54 8 / 4
1.3.53 8 / 4
1.3.52 8 / 4
1.3.51 8 / 4
1.3.50 8 / 4
1.3.49 8 / 4
1.3.48 8 / 4
1.3.47 8 / 4
1.3.46 8 / 4
1.3.45 8 / 4
1.3.44 8 / 4
1.3.43 8 / 4
1.3.42 8 / 4
1.3.41 8 / 4
1.3.40 8 / 4
1.3.39 8 / 4
1.3.38 8 / 4
1.3.37 8 / 4
1.3.36 8 / 4
1.3.35 8 / 4
1.3.34 10 / 4
1.3.33 10 / 4
1.3.32 8 / 4
1.3.31 8 / 4
1.3.30 8 / 4
1.3.29 10 / 4
1.3.28 10 / 4
1.3.27 10 / 4
1.3.26 10 / 4
1.3.25 10 / 4
1.3.24 10 / 4
1.3.23 10 / 4
1.3.22 10 / 4
1.3.21 10 / 4
1.3.20 10 / 4
1.3.19 10 / 4
1.3.18 10 / 4
1.3.17 10 / 4
1.3.16 10 / 4

v1.6.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.6.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.6.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.