← Home

@tramvai/module-common

Base module consisted of the architectural blocks for typical tramvai app. This module is required at most cases and is used a lot by the other modules.

46
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

super_olegmeskilltinkoffbank

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:hoist-non-react-statics AI (phantom-deps): hoist-non-react-statics is a declared runtime dep; phantom-dep heuristic false positive for this package. ai
provenance no-provenance AI (provenance): Established monorepo package; lack of provenance is consistent across all 835 versions. ai

Versions (showing 46 of 150)

Version Deps Published
6.79.2 20 / 0
6.79.1 20 / 0
6.79.0 20 / 0
6.78.1 20 / 0
6.78.0 20 / 0
6.77.3 20 / 0
6.77.2 20 / 0
6.68.6 20 / 0
6.68.4 20 / 0
6.68.3 20 / 0
6.68.2 20 / 0
6.68.1 20 / 0
6.68.0 20 / 0
6.67.1 20 / 0
6.67.0 20 / 0
6.66.1 20 / 0
6.65.0 20 / 0
6.64.1 20 / 0
6.63.1 20 / 0
6.63.0 20 / 0
6.62.0 20 / 0
6.59.0 20 / 0
5.53.168 20 / 0
5.53.165 20 / 0
5.53.164 20 / 0
5.53.163 20 / 0
5.53.159 20 / 0
5.53.156 20 / 0
5.53.155 20 / 0
5.53.150 20 / 0
5.53.146 20 / 0
5.53.144 20 / 0
5.53.143 20 / 0
5.53.142 20 / 0
5.53.140 20 / 0
5.53.123 20 / 0
5.53.122 20 / 0
5.53.120 20 / 0
5.53.118 20 / 0
5.53.117 20 / 0
5.53.116 20 / 0
5.53.115 20 / 0
5.53.114 20 / 0
5.53.112 20 / 0
5.53.111 20 / 0
5.53.94 20 / 0

v5.53.168

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v5.53.165

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v5.53.164

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v5.53.163

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.