@tmlmobilidade/repo-version
A CLI tool to bump the version of a NodeJS package.
4
Versions
AGPL-3.0-or-later
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
joaovasconcelosjusimen
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@tmlmobilidade/dates | AI (dependencies): First-party org dependency (@tmlmobilidade); stable pattern across this package's many versions. | ai | |
| license | copyleft-license:AGPL-3.0-or-later | AI (license): Package is intentionally AGPL-3.0; stable license choice for this org's tooling. | ai | |
| provenance | publisher-changed-known-maintainer | AI (provenance): Known maintainer rotation within the same org; stable pattern for this package. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): 246 versions in registry indicates automated versioning pipeline; rapid publishes are expected for this package. | ai | |
| provenance | no-provenance | AI (provenance): Consistent across all 232 versions from this publisher; not a security concern for this package. | ai |
Versions (showing 4 of 204)
| Version | Deps | Published |
|---|---|---|
| 20251229.1636.59 | 1 / 3 | |
| 20251229.1617.34 | 1 / 3 | |
| 20251229.1536.41 | 1 / 3 | |
| 20251229.1447.48 | 1 / 3 |