@uipath/case-tool
Manage Case Management instances, processes, and incidents.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | encoded-string-file:dist/index.js | AI (source-diff): Base64-encoded AppInsights connection string for telemetry, not a hidden payload. | ai | |
| phantom-deps | phantom-dep:fflate | AI (phantom-deps): Used via config/bundler, common for build tooling. | ai | |
| phantom-deps | phantom-dep:commander | AI (phantom-deps): External dep for CLI bin, not directly imported in bundled dist. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions publisher matches UiPath org's CI/CD automation pattern; repo URL confirms official org ownership. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainers have UiPath-affiliated usernames; consistent with org-level team expansion, not a takeover. | ai | |
| source-diff | encoded-string-file:dist/tool.js | AI (source-diff): Encoded string is an Azure App Insights connection string for telemetry; benign and consistent across UiPath CLI packages. | ai |
Versions (showing 18 of 18)
| Version | Deps | Published |
|---|---|---|
| 1.198.1 | 0 / 0 | |
| 1.197.0 | 0 / 0 | |
| 1.196.0 | 0 / 0 | |
| 1.195.0 | 0 / 0 | |
| 1.1.0 | 0 / 13 | |
| 1.0.4 | 0 / 13 | |
| 1.0.2 | 0 / 13 | |
| 1.0.0 | 0 / 13 | |
| 0.9.1 | 0 / 12 | |
| 0.9.0 | 0 / 12 | |
| 0.2.0 | 0 / 11 | |
| 0.1.14 | 0 / 11 | |
| 0.1.12 | 0 / 7 | |
| 0.1.11 | 0 / 7 | |
| 0.1.10 | 0 / 7 | |
| 0.1.9 | 1 / 7 | |
| 0.1.7 | 2 / 11 | |
| 0.1.5 | 1 / 5 |
v1.198.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.197.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.196.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.7
2 findingsModified file contains 2 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.