← Home

@things-factory/operato-scenario

npm Repository Homepage

The service engine that drives the scenario

34
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

woo_ramjyp220heartyohhorwengliang95nalshya113shortstopyoungwookwengliang95

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require in migrations loader reads local filesystem migration files by path — standard pattern for this package. ai
phantom-deps phantom-dep:@things-factory/help AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/form-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/more-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/export-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/font-base AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/i18n-base AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/import-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/layout-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/system-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/apptool-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/context-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/setting-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/resource-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/notification AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/oauth2-client AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/integration-ui AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/operato-license-checker AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai
phantom-deps phantom-dep:@things-factory/integration-notification AI (phantom-deps): Same-org scope; phantom-dep heuristic unreliable for monorepo peer deps. ai

Versions (showing 34 of 34)

Version Deps Published
4.3.822 20 / 1
4.3.705 20 / 1
4.3.695 20 / 1
4.3.689 20 / 1
4.3.686 20 / 1
4.3.685 20 / 1
4.3.684 20 / 1
4.3.682 20 / 1
4.3.677 20 / 1
4.3.675 20 / 1
4.3.673 20 / 1
4.3.671 20 / 1
4.3.660 20 / 1
4.3.642 20 / 1
4.3.617 20 / 1
4.3.616 20 / 1
4.3.614 20 / 1
4.3.609 20 / 1
4.3.591 20 / 1
4.3.582 20 / 1
4.3.581 20 / 1
4.3.563 20 / 1
4.3.562 20 / 1
4.3.544 20 / 1
4.3.536 20 / 1
4.3.535 20 / 1
4.3.534 20 / 1
4.3.533 20 / 1
4.3.526 20 / 1
4.3.524 20 / 1
4.3.518 20 / 1
4.3.512 20 / 1
4.3.511 20 / 1
4.3.479 20 / 1

v4.3.705

2 findings
HIGH Publisher changed: horwengliang95 → wengliang95 (on 2025-12-10) provenance

This version was published by a different npm account than previous versions on 2025-12-10. This could indicate a legitimate maintainer transition or an account compromise.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.695

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.689

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.685

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.684

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.682

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.677

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.675

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.673

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.671

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.660

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.617

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.616

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.614

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.609

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.591

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.582

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.581

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.563

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.562

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.544

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.536

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.535

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.534

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.533

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.526

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.524

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.518

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.512

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.511

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v4.3.479

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.