@tomsd/md-book
It provides .js that displays the contents from the markdown document files on page
12
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
tomsd
Keywords
markdown
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@tomsd/github-repo-js | AI (phantom-deps): Same-org dep likely used indirectly via bin entry; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:vue | AI (phantom-deps): Used in webpack-bundled Vue client; not directly imported in analyzed entry points. | ai | |
| phantom-deps | phantom-dep:marked | AI (phantom-deps): Used in bundled client code; phantom detection is a false positive for this build tool. | ai | |
| phantom-deps | phantom-dep:commander | AI (phantom-deps): Used in CLI bin; bundled output means direct import not visible to analyzer. | ai | |
| phantom-deps | phantom-dep:fast-glob | AI (phantom-deps): Used in bundled bin code; false positive for this package's build structure. | ai | |
| phantom-deps | phantom-dep:koa-router | AI (phantom-deps): Used in bundled server code; not directly imported in analyzed entry points. | ai | |
| phantom-deps | phantom-dep:koa | AI (phantom-deps): Used in bundled server code; not directly imported in analyzed entry points. | ai | |
| phantom-deps | phantom-dep:destyle.css | AI (phantom-deps): CSS dep used via webpack css-loader; not directly imported in JS entry points. | ai | |
| phantom-deps | phantom-dep:highlight.js | AI (phantom-deps): Used in bundled client code; false positive for this package's build structure. | ai | |
| phantom-deps | phantom-dep:koa-static-server | AI (phantom-deps): Used in bundled server code; not directly imported in analyzed entry points. | ai | |
| phantom-deps | phantom-dep:@tomsd/github-repo | AI (phantom-deps): Same-org dep used in bundled code; false positive for this package's build structure. | ai | |
| phantom-deps | phantom-dep:vue-router | AI (phantom-deps): Used in bundled Vue client; false positive for this package's build structure. | ai |