← Home

@things-factory/spc

module for handling SPC (Statistical Process Control)

51
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

woo_ramjyp220heartyohhorwengliang95nalshya113shortstopyoungwookwengliang95

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:pg AI (typosquat): SPC = Statistical Process Control; scoped package name has no intent to impersonate the 'pg' postgres client. ai
phantom-deps phantom-dep:@operato/dataset AI (phantom-deps): Declared in dependencies and referenced in config; phantom-dep heuristic fires on config-only references, stable false positive for this package. ai

Versions (showing 51 of 56)

View all versions
Version Deps Published
9.2.33 5 / 0
9.2.32 5 / 0
9.2.31 5 / 0
9.2.30 5 / 0
9.2.29 5 / 0
9.2.28 5 / 0
9.2.27 5 / 0
9.2.26 5 / 0
9.2.25 5 / 0
9.2.24 5 / 0
9.2.19 5 / 0
9.1.18 5 / 0
9.1.17 5 / 0
9.1.16 5 / 0
9.1.15 5 / 0
9.1.14 5 / 0
9.1.13 5 / 0
9.1.12 5 / 0
9.1.8 5 / 0
9.1.7 5 / 0
9.1.6 5 / 0
9.1.5 5 / 0
9.1.4 5 / 0
9.1.3 5 / 0
9.1.1 5 / 0
9.1.0 5 / 0
9.0.41 5 / 0
9.0.38 5 / 0
9.0.37 5 / 0
9.0.36 5 / 0
9.0.35 5 / 0
9.0.34 5 / 0
9.0.33 5 / 0
9.0.32 5 / 0
9.0.28 5 / 0
9.0.27 5 / 0
9.0.26 5 / 0
9.0.25 5 / 0
9.0.24 5 / 0
9.0.20 5 / 0
9.0.19 5 / 0
9.0.15 5 / 0
9.0.14 5 / 0
9.0.13 5 / 0
9.0.12 5 / 0
9.0.9 5 / 0
9.0.7 5 / 0
9.0.6 5 / 0
9.0.5 5 / 0
9.0.4 5 / 0
9.0.3 5 / 0

v9.2.33

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v9.2.32

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v9.2.31

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.