← Home

@vlandoss/run-run

npm Repository Homepage

The CLI toolbox to fullstack common scripts in Variable Land

35
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

rqbazan

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern new-deps-added AI (publish-pattern): @usage-spec/commander is a legitimate companion to the already-present commander dep; addition is contextually appropriate for a CLI toolbox. ai
publish-pattern rapid-publish AI (publish-pattern): SLSA provenance attestation confirms CI/CD publish pipeline; rapid publish is expected in automated release workflows. ai
phantom-deps phantom-dep:typescript AI (phantom-deps): typescript is a toolchain dep invoked via CLI, not imported directly. This is expected for a build/type-check toolbox package. ai
phantom-deps phantom-dep:oxlint-tsgolint AI (phantom-deps): oxlint-tsgolint is a linting plugin referenced in config, not imported directly. Expected pattern for CLI tooling packages. ai

Versions (showing 35 of 35)

Version Deps Published
0.6.1 14 / 1
0.6.0 14 / 1
0.5.3 14 / 1
0.5.2 14 / 1
0.5.1 14 / 1
0.5.0 15 / 1
0.4.1 15 / 1
0.4.0 15 / 1
0.3.0 14 / 1
0.2.0 14 / 1
0.1.4 14 / 1
0.1.3 14 / 1
0.1.2 14 / 1
0.1.1 14 / 1
0.1.0 14 / 1
0.0.21 14 / 0
0.0.20 14 / 0
0.0.19 14 / 0
0.0.17 14 / 0
0.0.16 14 / 0
0.0.15 13 / 0
0.0.14 13 / 0
0.0.13 9 / 0
0.0.12 9 / 0
0.0.11 8 / 0
0.0.10 8 / 0
0.0.9 8 / 0
0.0.8 8 / 0
0.0.7 8 / 0
0.0.6 8 / 0
0.0.5 8 / 0
0.0.4 8 / 0
0.0.3 8 / 0
0.0.2 8 / 0
0.0.1 7 / 0

v0.0.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.