← Home

@things-factory/integration-accounting

npm Repository

Module to manage integration with accounting service.

67
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

woo_ramjyp220heartyohhorwengliang95nalshya113shortstopyoungwookwengliang95

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@things-factory/system-ui AI (phantom-deps): Same-org monorepo peer dep pattern. ai
semgrep semgrep:dynamic-require AI (semgrep): Migration file loader iterating local filesystem paths; not user-controlled input. ai
phantom-deps phantom-dep:@things-factory/auth-ui AI (phantom-deps): Same-org monorepo sibling; declared as peer/runtime dep, not directly imported in this module. ai
phantom-deps phantom-dep:@things-factory/code-ui AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/more-ui AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/biz-base AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/i18n-base AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/apptool-ui AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/context-ui AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/setting-ui AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/resource-ui AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/product-base AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/integration-ui AI (phantom-deps): Same-org monorepo sibling pattern; stable false positive for this package. ai

Versions (showing 67 of 67)

Version Deps Published
9.2.33 14 / 8
9.2.31 14 / 8
9.2.30 14 / 8
9.2.29 14 / 8
9.2.28 14 / 8
9.2.27 14 / 8
9.2.25 14 / 8
9.2.22 14 / 8
9.2.17 14 / 8
9.2.16 14 / 8
9.1.19 14 / 8
8.0.87 14 / 8
8.0.76 14 / 8
8.0.71 14 / 8
8.0.64 14 / 8
8.0.63 14 / 8
4.3.824 15 / 8
4.3.804 15 / 8
4.3.791 15 / 8
4.3.790 15 / 8
4.3.764 15 / 8
4.3.752 15 / 8
4.3.738 15 / 8
4.3.734 15 / 8
4.3.725 15 / 8
4.3.723 15 / 8
4.3.689 15 / 8
4.3.686 15 / 8
4.3.685 15 / 8
4.3.684 15 / 8
4.3.682 15 / 8
4.3.677 15 / 8
4.3.675 15 / 8
4.3.673 15 / 8
4.3.671 15 / 8
4.3.660 15 / 8
4.3.656 15 / 8
4.3.654 15 / 8
4.3.653 15 / 8
4.3.652 15 / 8
4.3.651 15 / 8
4.3.642 15 / 8
4.3.639 15 / 8
4.3.638 15 / 8
4.3.637 15 / 8
4.3.616 15 / 8
4.3.614 15 / 8
4.3.609 15 / 8
4.3.595 15 / 8
4.3.593 15 / 8
4.3.591 15 / 8
4.3.582 15 / 8
4.3.581 15 / 8
4.3.563 15 / 8
4.3.562 15 / 8
4.3.544 15 / 8
4.3.536 15 / 8
4.3.535 15 / 8
4.3.534 15 / 8
4.3.533 15 / 8
4.3.526 15 / 8
4.3.524 15 / 8
4.3.518 15 / 8
4.3.512 15 / 8
4.3.511 15 / 8
4.3.495 15 / 8
4.3.479 15 / 8

v9.2.33

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v9.2.31

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.616

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.614

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.609

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.595

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.593

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.591

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.582

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.581

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.563

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.562

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.544

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.536

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.535

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.534

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.533

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.526

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.524

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.518

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.512

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.511

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.495

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.479

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.