← Home

@things-factory/integration-lmd

npm Repository

Module for managing last mile delivery partner integration

49
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

woo_ramjyp220heartyohhorwengliang95nalshya113shortstopyoungwookwengliang95

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@operato/data-grist AI (phantom-deps): Referenced in config files as part of org-level grist-ui migration; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/biz-base AI (phantom-deps): Same org scope; declared peer-style dep, stable false positive for this monorepo package. ai
phantom-deps phantom-dep:@things-factory/i18n-base AI (phantom-deps): Same org scope; declared peer-style dep, stable false positive for this monorepo package. ai
phantom-deps phantom-dep:@things-factory/code-ui AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/more-ui AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/system-ui AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/apptool-ui AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
semgrep semgrep:shady-links-raw-ip AI (semgrep): Hardcoded Citylink third-party API endpoint; stable integration pattern for this package. ai
phantom-deps phantom-dep:@things-factory/setting-ui AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/resource-ui AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/integration-ui AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/context-ui AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
semgrep semgrep:dynamic-require AI (semgrep): Migration file loader pattern; standard for TypeORM migration discovery in this monorepo. ai
phantom-deps phantom-dep:@things-factory/auth-ui AI (phantom-deps): Same-org monorepo dep declared for transitive/peer use; stable false positive. ai

Versions (showing 49 of 49)

Version Deps Published
9.2.33 14 / 8
9.2.31 14 / 8
9.2.30 14 / 8
9.2.29 14 / 8
9.2.28 14 / 8
9.2.27 14 / 8
9.2.25 14 / 8
9.2.5 14 / 8
4.3.823 15 / 8
4.3.822 15 / 8
4.3.798 15 / 8
4.3.788 15 / 8
4.3.776 15 / 8
4.3.770 15 / 8
4.3.705 15 / 8
4.3.689 15 / 8
4.3.669 15 / 8
4.3.617 15 / 8
4.3.616 15 / 8
4.3.614 15 / 8
4.3.609 15 / 8
4.3.595 15 / 8
4.3.591 15 / 8
4.3.582 15 / 8
4.3.581 15 / 8
4.3.563 15 / 8
4.3.562 15 / 8
4.3.544 15 / 8
4.3.541 15 / 8
4.3.537 15 / 8
4.3.536 15 / 8
4.3.535 15 / 8
4.3.534 15 / 8
4.3.533 15 / 8
4.3.526 15 / 8
4.3.524 15 / 8
4.3.518 15 / 8
4.3.512 15 / 8
4.3.511 15 / 8
4.3.509 15 / 8
4.3.505 15 / 8
4.3.502 15 / 8
4.3.501 15 / 8
4.3.479 15 / 8
4.3.470 15 / 8
4.3.468 15 / 8
4.3.464 15 / 8
4.3.461 15 / 8
4.3.460 15 / 8

v9.2.33

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v9.2.31

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.617

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.616

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.614

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.609

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.595

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.591

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.582

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.581

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.563

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.562

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.544

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.541

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.537

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.536

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.535

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.534

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.533

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.526

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.524

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.518

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.512

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.511

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.509

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.505

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.502

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.501

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.479

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.470

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.468

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.464

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.461

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.460

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.