← Home

@things-factory/integration-base

npm Repository
51
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

woo_ramjyp220heartyohhorwengliang95nalshya113shortstopyoungwookwengliang95

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:hex-decode AI (semgrep): Buffer.from(message, 'hex') in echo-send-hex.js is a legitimate hex-protocol write, not payload obfuscation. ai
phantom-deps phantom-dep:@operato/moment-timezone-es AI (phantom-deps): Declared in dependencies and referenced in config; phantom-dep heuristic fires because it's not directly imported in JS. ai
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require in migrations/index.js is a standard pattern for loading migration files by path; not a security risk. ai
semgrep semgrep:base64-decode AI (semgrep): Base64 decode is used to decode AWS Lambda log results; legitimate AWS SDK usage pattern. ai

Versions (showing 51 of 54)

View all versions
Version Deps Published
9.2.33 18 / 0
9.2.31 18 / 0
9.2.30 18 / 0
9.2.29 18 / 0
9.2.28 18 / 0
9.2.27 18 / 0
9.2.13 18 / 0
9.1.19 18 / 0
8.0.64 18 / 0
8.0.63 18 / 0
6.4.10 17 / 1
6.4.8 17 / 1
4.3.791 17 / 0
4.3.788 17 / 0
4.3.776 17 / 0
4.3.770 17 / 0
4.3.767 17 / 0
4.3.764 17 / 0
4.3.755 17 / 0
4.3.752 17 / 0
4.3.743 17 / 0
4.3.740 17 / 0
4.3.738 17 / 0
4.3.695 17 / 0
4.3.689 17 / 0
4.3.686 17 / 0
4.3.685 17 / 0
4.3.684 17 / 0
4.3.682 17 / 0
4.3.677 17 / 0
4.3.675 17 / 0
4.3.673 17 / 0
4.3.672 17 / 0
4.3.671 17 / 0
4.3.653 17 / 0
4.3.652 17 / 0
4.3.616 17 / 0
4.3.614 17 / 0
4.3.591 17 / 0
4.3.582 17 / 0
4.3.581 17 / 0
4.3.563 17 / 0
4.3.562 17 / 0
4.3.544 17 / 0
4.3.536 17 / 0
4.3.535 17 / 0
4.3.534 17 / 0
4.3.533 17 / 0
4.3.526 17 / 0
4.3.524 17 / 0
4.3.518 17 / 0

v9.2.33

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v9.2.31

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.616

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.614

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.591

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.582

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.581

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.563

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.562

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.544

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.536

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.535

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.534

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.533

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.526

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.524

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.518

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.