@workglow/sqlite
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | large-new-source-files | AI (source-diff): New files are build artifacts for multiple targets (browser/node/bun) plus source maps; expected for this package's build structure. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase driven by multi-target build output and source maps, not injected payloads. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): better-sqlite3, @sqlite.org/sqlite-wasm, and @sqliteai/sqlite-vector are legitimate SQLite ecosystem packages matching the package's stated purpose. | ai |
Versions (showing 51 of 109)
| Version | Deps | Published |
|---|---|---|
| 0.3.27 | 0 / 7 | |
| 0.3.26 | 0 / 7 | |
| 0.3.25 | 0 / 7 | |
| 0.3.24 | 0 / 7 | |
| 0.3.23 | 0 / 7 | |
| 0.3.22 | 0 / 7 | |
| 0.3.21 | 0 / 7 | |
| 0.3.20 | 0 / 7 | |
| 0.3.19 | 0 / 7 | |
| 0.3.18 | 0 / 7 | |
| 0.3.17 | 0 / 7 | |
| 0.3.16 | 0 / 7 | |
| 0.3.15 | 0 / 7 | |
| 0.3.14 | 0 / 7 | |
| 0.3.13 | 0 / 7 | |
| 0.3.12 | 0 / 7 | |
| 0.3.11 | 0 / 7 | |
| 0.3.10 | 0 / 7 | |
| 0.3.9 | 0 / 7 | |
| 0.3.7 | 0 / 7 | |
| 0.3.6 | 0 / 7 | |
| 0.3.5 | 0 / 7 | |
| 0.3.4 | 0 / 7 | |
| 0.3.3 | 0 / 7 | |
| 0.3.2 | 0 / 7 | |
| 0.3.1 | 0 / 7 | |
| 0.3.0 | 0 / 7 | |
| 0.2.37 | 0 / 7 | |
| 0.2.36 | 0 / 7 | |
| 0.2.35 | 0 / 7 | |
| 0.2.34 | 0 / 7 | |
| 0.2.33 | 0 / 7 | |
| 0.2.32 | 0 / 7 | |
| 0.2.31 | 0 / 7 | |
| 0.2.30 | 0 / 4 | |
| 0.2.29 | 3 / 4 | |
| 0.2.28 | 3 / 4 | |
| 0.0.125 | 0 / 1 | |
| 0.0.124 | 0 / 1 | |
| 0.0.123 | 0 / 1 | |
| 0.0.122 | 0 / 1 | |
| 0.0.121 | 0 / 1 | |
| 0.0.120 | 0 / 1 | |
| 0.0.119 | 0 / 1 | |
| 0.0.118 | 0 / 1 | |
| 0.0.117 | 0 / 1 | |
| 0.0.116 | 0 / 1 | |
| 0.0.115 | 0 / 1 | |
| 0.0.114 | 0 / 1 | |
| 0.0.113 | 0 / 1 | |
| 0.0.110 | 0 / 1 |
v0.3.27
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.26
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.25
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.24
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.23
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.22
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.