← Home

@tmlmobilidade/controllers

npm Repository Homepage

These are shared controllers to retrieve and prepare common data across apps.

60
Versions
AGPL-3.0-or-later
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

joaovasconcelosjusimen

Keywords

public transittmltransportes metropolitanos de lisboaservices

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
license copyleft-license:AGPL-3.0-or-later AI (license): Declared license matches package intent; stable for this package. ai
phantom-deps phantom-dep:@tmlmobilidade/go-clients-mongo AI (phantom-deps): Same-org scope; likely used indirectly within monorepo build. ai
dependencies unvetted-dep:@tmlmobilidade/go-providers-storage AI (dependencies): Same-org monorepo sibling package, not third-party. ai
dependencies unvetted-dep:@tmlmobilidade/go-interfaces-godb AI (dependencies): First-party org package renamed from prior sibling dep; not third-party risk. ai
dependencies unvetted-dep:@tmlmobilidade/fastify AI (dependencies): Same-org monorepo sibling package, stable across versions. ai
dependencies unvetted-dep:@tmlmobilidade/utils AI (dependencies): Same-org monorepo sibling package, stable across versions. ai
dependencies unvetted-dep:@tmlmobilidade/normalizers AI (dependencies): Same-org monorepo sibling package, stable across versions. ai
phantom-deps phantom-dep:@tmlmobilidade/utils AI (phantom-deps): Same-org scope sibling package. ai
phantom-deps phantom-dep:@tmlmobilidade/go-interfaces-go-db AI (phantom-deps): Same-org scope; heuristic false positive pattern for this monorepo. ai
dependencies unvetted-dep:@tmlmobilidade/go-interfaces-go-db AI (dependencies): Same-org monorepo sibling package, low risk. ai
publish-pattern rapid-publish AI (publish-pattern): Package uses date-based automated versioning with 215 published versions; rapid publishes are the normal release pattern. ai
publish-pattern new-deps-added AI (publish-pattern): New dep is from the same @tmlmobilidade org; consistent with internal package expansion pattern across 198 versions. ai
dependencies unvetted-dep:@tmlmobilidade/interfaces AI (dependencies): Sibling package from same org/monorepo; stable false positive for this package family. ai
phantom-deps phantom-dep:@fastify/websocket AI (phantom-deps): @fastify/websocket is a declared runtime dep; phantom-dep heuristic false positive for this package. ai
phantom-deps phantom-dep:zod AI (phantom-deps): zod is a declared runtime dep; phantom-dep heuristic false positive for this package. ai
provenance no-provenance AI (provenance): Org consistently publishes without provenance; stable pattern across 189 versions. ai

Versions (showing 60 of 60)

Version Deps Published
20260723.1550.37 9 / 7
20260723.1350.16 9 / 7
20260719.1827.14 7 / 7
20260717.1316.58 7 / 7
20260716.1659.40 7 / 7
20260714.2327.46 7 / 7
20260714.2217.45 7 / 7
20260714.1632.21 7 / 7
20260714.1408.55 7 / 7
20260714.1333.48 7 / 7
20260713.1735.8 7 / 7
20260713.1712.23 7 / 7
20260713.1622.27 7 / 7
20260713.1602.10 7 / 7
20260710.2210.9 7 / 7
20260627.1155.27 6 / 7
20260623.1548.1 6 / 7
20260618.507.0 6 / 7
20260616.229.43 6 / 7
20260611.1651.27 6 / 7
20260609.1128.18 6 / 7
20260607.1410.59 6 / 7
20260607.1318.3 6 / 7
20260602.2322.45 6 / 7
20260525.1830.15 6 / 7
20260519.2046.53 6 / 7
20260519.2010.45 6 / 7
20260519.1741.30 6 / 7
20260518.901.35 6 / 7
20260514.1556.50 6 / 7
20260514.1444.18 6 / 7
20260514.1436.37 6 / 7
20260513.1602.22 6 / 7
20260506.2129.32 6 / 7
20260429.1713.40 5 / 7
20260424.1352.48 5 / 7
20260418.1237.24 5 / 7
20260411.1243.43 5 / 7
20260331.1620.53 5 / 7
20260330.1756.23 5 / 7
20260326.2207.53 5 / 7
20260326.1518.29 5 / 7
20260325.1459.50 5 / 7
20260324.1917.27 5 / 7
20260324.1249.38 5 / 7
20260322.1829.11 5 / 7
20260322.1655.45 5 / 7
20260320.2238.33 5 / 7
20260320.1746.41 5 / 7
20260316.1439.45 5 / 7
20260306.1635.15 5 / 7
20260305.1602.46 5 / 7
20260226.1419.7 7 / 7
20260225.1338.31 7 / 7
20260216.2140.51 7 / 7
20260212.1701.51 7 / 7
20260212.1101.35 7 / 7
20260212.105.2 7 / 7
20260203.1129.22 7 / 7
20260129.1254.47 6 / 6

v20260723.1550.37

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260723.1350.16

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260719.1827.14

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260717.1316.58

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260716.1659.40

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260714.2327.46

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260714.2217.45

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260714.1632.21

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260714.1408.55

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260714.1333.48

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260713.1735.8

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260713.1712.23

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260713.1622.27

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260713.1602.10

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260710.2210.9

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v20260627.1155.27

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.