← Home

@things-factory/integration-powrup

npm Repository Homepage
41
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

woo_ramjyp220heartyohhorwengliang95nalshya113shortstopyoungwookwengliang95

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:dynamic-require AI (semgrep): Migration-loader pattern globbing known directory; stable across versions. ai
phantom-deps phantom-dep:querystring AI (phantom-deps): Declared for config/indirect use; stable false positive for this package. ai
phantom-deps phantom-dep:@things-factory/auth-ui AI (phantom-deps): Same-org plugin dep; typical of things-factory architecture. ai
phantom-deps phantom-dep:@things-factory/code-ui AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/more-ui AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/grist-ui AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/i18n-base AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/system-ui AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/apptool-ui AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/context-ui AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/setting-ui AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/resource-ui AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/integration-ui AI (phantom-deps): Same-org plugin dep; stable false positive. ai
phantom-deps phantom-dep:@things-factory/integration-marketplace AI (phantom-deps): Same-org plugin dep; stable false positive. ai

Versions (showing 41 of 41)

Version Deps Published
4.3.824 16 / 8
4.3.823 16 / 8
4.3.822 16 / 8
4.3.819 16 / 8
4.3.701 16 / 8
4.3.626 16 / 8
4.3.617 16 / 8
4.3.616 16 / 8
4.3.614 16 / 8
4.3.609 16 / 8
4.3.595 16 / 8
4.3.591 16 / 8
4.3.587 16 / 8
4.3.582 16 / 8
4.3.581 16 / 8
4.3.563 16 / 8
4.3.562 16 / 8
4.3.544 16 / 8
4.3.541 16 / 8
4.3.537 16 / 8
4.3.536 16 / 8
4.3.535 16 / 8
4.3.534 16 / 8
4.3.533 16 / 8
4.3.526 16 / 8
4.3.524 16 / 8
4.3.518 16 / 8
4.3.512 16 / 8
4.3.511 16 / 8
4.3.509 16 / 8
4.3.505 16 / 8
4.3.502 16 / 8
4.3.501 16 / 8
4.3.479 16 / 8
4.3.475 16 / 8
4.3.470 16 / 8
4.3.468 16 / 8
4.3.464 16 / 8
4.3.461 16 / 8
4.3.460 16 / 8
4.3.458 16 / 8

v4.3.626

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.617

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.616

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.614

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.609

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.595

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.591

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.587

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.582

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.581

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.563

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.562

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.544

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.541

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.537

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.536

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.535

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.534

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.533

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.526

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.524

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.518

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.512

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.511

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.509

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.505

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.502

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.501

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.479

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.475

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.470

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.468

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.464

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.461

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.460

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.458

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.