@takeshape/schema
TakeShape Schema
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:ajv | AI (phantom-deps): ajv is a declared runtime dep used via schema validation; phantom-dep heuristic fires on indirect usage patterns. | ai | |
| phantom-deps | phantom-dep:ajv-formats | AI (phantom-deps): ajv-formats is a declared runtime dep; same indirect-usage false positive as ajv. | ai | |
| phantom-deps | phantom-dep:tiny-invariant | AI (phantom-deps): tiny-invariant is a declared runtime dep; phantom-dep heuristic is a stable false positive for this package. | ai |
Versions (showing 83 of 83)
| Version | Deps | Published |
|---|---|---|
| 12.20.0 | 16 / 17 | |
| 12.19.0 | 16 / 17 | |
| 12.18.2 | 16 / 17 | |
| 12.18.0 | 16 / 17 | |
| 12.17.3 | 16 / 17 | |
| 12.17.2 | 16 / 17 | |
| 12.16.1 | 16 / 17 | |
| 12.16.0 | 16 / 17 | |
| 12.15.0 | 16 / 17 | |
| 12.14.2 | 16 / 17 | |
| 12.13.3 | 16 / 17 | |
| 12.13.2 | 16 / 17 | |
| 12.13.1 | 16 / 17 | |
| 12.13.0 | 16 / 17 | |
| 12.9.0 | 16 / 16 | |
| 12.8.0 | 16 / 16 | |
| 12.7.0 | 16 / 16 | |
| 12.4.3 | 16 / 16 | |
| 12.3.0 | 16 / 16 | |
| 12.2.2 | 16 / 16 | |
| 12.2.1 | 16 / 16 | |
| 12.1.7 | 16 / 16 | |
| 12.1.6 | 16 / 16 | |
| 12.1.5 | 16 / 16 | |
| 12.1.4 | 16 / 16 | |
| 12.1.1 | 16 / 16 | |
| 12.1.0 | 16 / 16 | |
| 12.0.1 | 16 / 16 | |
| 12.0.0 | 16 / 16 | |
| 11.188.0 | 16 / 16 | |
| 11.187.1 | 16 / 16 | |
| 11.186.1 | 16 / 16 | |
| 11.186.0 | 16 / 16 | |
| 11.185.0 | 16 / 16 | |
| 11.184.3 | 16 / 16 | |
| 11.184.1 | 16 / 16 | |
| 11.184.0 | 16 / 16 | |
| 11.182.0 | 16 / 16 | |
| 11.181.0 | 16 / 16 | |
| 11.180.1 | 16 / 16 | |
| 11.180.0 | 16 / 16 | |
| 11.179.0 | 16 / 16 | |
| 11.178.0 | 16 / 16 | |
| 11.177.8 | 16 / 16 | |
| 11.177.6 | 16 / 16 | |
| 11.177.5 | 16 / 16 | |
| 11.177.4 | 16 / 16 | |
| 11.177.2 | 16 / 16 | |
| 11.177.1 | 16 / 16 | |
| 11.177.0 | 16 / 16 | |
| 11.176.0 | 16 / 16 | |
| 11.175.0 | 16 / 16 | |
| 11.174.1 | 16 / 16 | |
| 11.174.0 | 16 / 16 | |
| 11.173.0 | 16 / 16 | |
| 11.172.0 | 16 / 16 | |
| 11.171.0 | 16 / 16 | |
| 11.170.3 | 16 / 16 | |
| 11.170.2 | 16 / 16 | |
| 11.170.0 | 16 / 16 | |
| 11.168.3 | 16 / 16 | |
| 11.168.2 | 16 / 16 | |
| 11.168.1 | 16 / 16 | |
| 11.167.1 | 16 / 16 | |
| 11.164.0 | 16 / 16 | |
| 11.162.1 | 16 / 16 | |
| 11.161.2 | 16 / 16 | |
| 11.160.2 | 16 / 16 | |
| 11.160.1 | 16 / 16 | |
| 11.159.1 | 16 / 16 | |
| 11.158.2 | 16 / 16 | |
| 11.157.0 | 16 / 16 | |
| 11.155.3 | 16 / 16 | |
| 11.155.1 | 16 / 16 | |
| 11.154.5 | 16 / 16 | |
| 11.154.4 | 16 / 16 | |
| 11.154.2 | 16 / 16 | |
| 11.154.1 | 16 / 16 | |
| 11.144.1 | 15 / 16 | |
| 11.143.2 | 15 / 16 | |
| 11.143.0 | 15 / 16 | |
| 11.142.6 | 15 / 16 | |
| 11.142.5 | 15 / 16 |
v12.3.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.2.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.2.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.0.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.0.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.188.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.187.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.186.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.186.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.185.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.184.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.184.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.184.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.182.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.181.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.180.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.180.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.179.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.178.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.177.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.177.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.177.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.177.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.177.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.177.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.177.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.176.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.175.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.174.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.174.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.173.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.172.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.171.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.170.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.170.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.170.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.168.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.168.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.168.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.167.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.164.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.162.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.161.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.160.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.160.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.159.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.158.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.157.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.155.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.155.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.154.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.154.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.154.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.154.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.144.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.143.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.143.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.142.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v11.142.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.