@telorun/test
Telo Test module - Test runner for Telo manifests.
51
Versions
SEE LICENSE IN LICENSE
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
pasi
Keywords
telotestrunner
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Minor publish metadata gap, no behavioral change vs prior approved version. | ai | |
| dependencies | unvetted-dep:@telorun/glob | AI (dependencies): First-party @telorun scoped package from the same monorepo. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): Added dep is first-party sibling package, not a supply-chain risk. | ai | |
| typosquat | typosquat.levenshtein:jest | AI (typosquat): Scoped @telorun/test is a test runner for the Telo platform, not a typosquat of jest. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Test runner merging .env files with process.env is expected behavior for this package's purpose. | ai | |
| typosquat | typosquat.levenshtein:next | AI (typosquat): Scoped package under telorun org; no resemblance to Next.js in purpose or namespace. | ai | |
| typosquat | typosquat.levenshtein:vitest | AI (typosquat): Scoped package under telorun org; not impersonating vitest. | ai |
Versions (showing 51 of 63)
| Version | Deps | Published |
|---|---|---|
| 1.0.5 | 2 / 2 | |
| 1.0.4 | 2 / 2 | |
| 1.0.3 | 2 / 2 | |
| 1.0.2 | 2 / 2 | |
| 1.0.1 | 2 / 2 | |
| 0.4.36 | 3 / 3 | |
| 0.4.34 | 3 / 3 | |
| 0.4.33 | 3 / 3 | |
| 0.4.32 | 2 / 3 | |
| 0.4.31 | 2 / 3 | |
| 0.4.30 | 2 / 3 | |
| 0.4.29 | 2 / 3 | |
| 0.4.28 | 2 / 3 | |
| 0.4.27 | 2 / 3 | |
| 0.4.26 | 2 / 3 | |
| 0.4.25 | 2 / 3 | |
| 0.4.23 | 2 / 3 | |
| 0.4.22 | 2 / 3 | |
| 0.4.21 | 2 / 3 | |
| 0.4.20 | 2 / 3 | |
| 0.4.19 | 2 / 3 | |
| 0.4.18 | 2 / 3 | |
| 0.4.17 | 2 / 3 | |
| 0.4.16 | 2 / 3 | |
| 0.4.15 | 2 / 3 | |
| 0.4.14 | 2 / 3 | |
| 0.4.13 | 2 / 3 | |
| 0.4.12 | 2 / 3 | |
| 0.4.11 | 2 / 3 | |
| 0.4.10 | 2 / 3 | |
| 0.4.9 | 2 / 3 | |
| 0.4.8 | 2 / 3 | |
| 0.4.7 | 2 / 3 | |
| 0.4.6 | 2 / 3 | |
| 0.4.5 | 2 / 3 | |
| 0.4.4 | 2 / 3 | |
| 0.4.3 | 2 / 3 | |
| 0.4.2 | 2 / 3 | |
| 0.4.1 | 2 / 3 | |
| 0.4.0 | 2 / 2 | |
| 0.3.10 | 3 / 2 | |
| 0.3.9 | 3 / 2 | |
| 0.3.8 | 3 / 2 | |
| 0.3.7 | 3 / 2 | |
| 0.3.6 | 3 / 2 | |
| 0.3.5 | 3 / 2 | |
| 0.3.4 | 3 / 2 | |
| 0.3.3 | 3 / 2 | |
| 0.3.2 | 3 / 2 | |
| 0.3.1 | 3 / 2 | |
| 0.3.0 | 3 / 2 |
v0.4.36
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.34
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.