@verii/endpoints-credential-types-registrar
Credential Types Registrar
14
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
lfdt-npmhyperledger-ghci
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@fastify/helmet | AI (dependencies): @fastify/helmet is a well-known, widely-used Fastify security plugin; unvetted status is a registry gap, not a real risk. | ai | |
| dependencies | unvetted-dep:@fastify/autoload | AI (dependencies): @fastify/autoload is a well-known official Fastify plugin; unvetted status is a registry gap, not a real risk. | ai | |
| dependencies | unvetted-dep:@fastify/sensible | AI (dependencies): @fastify/sensible is a well-known official Fastify plugin; unvetted status is a registry gap, not a real risk. | ai | |
| phantom-deps | phantom-dep:@fastify/sensible | AI (phantom-deps): Fastify plugins loaded via autoload config pattern; phantom-dep finding is a stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:fastify | AI (phantom-deps): Fastify is loaded via @fastify/autoload from config; not directly imported is expected for this microservice pattern. | ai | |
| phantom-deps | phantom-dep:@fastify/swagger-ui | AI (phantom-deps): Fastify plugins loaded via autoload config pattern; phantom-dep finding is a stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@fastify/helmet | AI (phantom-deps): Fastify plugins loaded via autoload config pattern; phantom-dep finding is a stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@fastify/swagger | AI (phantom-deps): Fastify plugins loaded via autoload config pattern; phantom-dep finding is a stable false positive for this package. | ai |