← Home

@things-factory/integration-sellercraft

npm Repository

A microservice that manage integration with sellercraft ecommerce omnichannel app

45
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

woo_ramjyp220heartyohhorwengliang95nalshya113shortstopyoungwookwengliang95

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@things-factory/context-ui AI (phantom-deps): Same-org monorepo sibling. ai
phantom-deps phantom-dep:@things-factory/setting-ui AI (phantom-deps): Same-org monorepo sibling. ai
phantom-deps phantom-dep:@things-factory/resource-ui AI (phantom-deps): Same-org monorepo sibling. ai
phantom-deps phantom-dep:@things-factory/integration-ui AI (phantom-deps): Same-org monorepo sibling. ai
semgrep semgrep:dynamic-require AI (semgrep): Migration directory loader pattern; stable across versions of this monorepo package. ai
phantom-deps phantom-dep:@things-factory/auth-ui AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic unreliable for peer/optional deps. ai
phantom-deps phantom-dep:@things-factory/code-ui AI (phantom-deps): Same-org monorepo sibling. ai
phantom-deps phantom-dep:@things-factory/more-ui AI (phantom-deps): Same-org monorepo sibling. ai
phantom-deps phantom-dep:@things-factory/biz-base AI (phantom-deps): Same-org monorepo sibling. ai
phantom-deps phantom-dep:@things-factory/grist-ui AI (phantom-deps): Same-org monorepo sibling. ai
phantom-deps phantom-dep:@things-factory/system-ui AI (phantom-deps): Same-org monorepo sibling. ai
phantom-deps phantom-dep:@things-factory/apptool-ui AI (phantom-deps): Same-org monorepo sibling. ai
phantom-deps phantom-dep:querystring AI (phantom-deps): Listed in dependencies; phantom-dep heuristic false positive for this package. ai

Versions (showing 45 of 45)

Version Deps Published
9.2.33 14 / 8
9.2.31 14 / 8
9.2.30 14 / 8
9.2.29 14 / 8
9.2.28 14 / 8
9.2.27 14 / 8
9.2.25 14 / 8
4.3.823 16 / 8
4.3.819 16 / 8
4.3.815 16 / 8
4.3.804 16 / 8
4.3.617 16 / 8
4.3.616 16 / 8
4.3.614 16 / 8
4.3.609 16 / 8
4.3.595 16 / 8
4.3.591 16 / 8
4.3.587 16 / 8
4.3.582 16 / 8
4.3.581 16 / 8
4.3.563 16 / 8
4.3.562 16 / 8
4.3.544 16 / 8
4.3.541 16 / 8
4.3.537 16 / 8
4.3.536 16 / 8
4.3.535 16 / 8
4.3.534 16 / 8
4.3.526 16 / 8
4.3.524 16 / 8
4.3.518 16 / 8
4.3.512 16 / 8
4.3.511 16 / 8
4.3.509 16 / 8
4.3.505 16 / 8
4.3.502 16 / 8
4.3.501 16 / 8
4.3.479 16 / 8
4.3.475 16 / 8
4.3.470 16 / 8
4.3.468 16 / 8
4.3.464 16 / 8
4.3.461 16 / 8
4.3.460 16 / 8
4.3.458 16 / 8

v9.2.33

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v9.2.31

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.617

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.616

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.614

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.609

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.595

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.591

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.587

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.582

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.581

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.563

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.562

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.544

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.541

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.537

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.536

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.535

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.534

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.526

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.524

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.518

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.512

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.511

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.509

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.505

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.502

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.501

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.479

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.475

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.470

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.468

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.464

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.461

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.460

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.458

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.