← Home

@xyo-network/diviner-schema-list-memory

51
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

xyojoelbcarterrphansen91jordantrouwjonesmac

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): joelbcarter is a known XYO org maintainer with extensive track record on this namespace. ai
provenance missing-githead AI (provenance): High-volume XYO monorepo publisher; occasional missing gitHead is a CI environment artifact, not a supply-chain indicator. ai
bogus-package bogus-package AI (bogus-package): Large XYO monorepo sub-package; sparse README and no keywords are expected for internal SDK modules. ai
provenance no-provenance AI (provenance): Large established monorepo; provenance absence is consistent across all XYO packages. ai
license weak-copyleft-license:LGPL-3.0-only AI (license): LGPL-3.0 is the declared license for the entire XYO SDK; stable across versions. ai

Versions (showing 51 of 84)

View all versions
Version Deps Published
5.5.2 2 / 48
5.5.1 2 / 48
5.5.0 2 / 48
5.4.1 4 / 29
5.4.0 4 / 29
5.3.30 4 / 31
5.3.29 4 / 31
5.3.27 5 / 13
5.3.26 5 / 18
5.3.25 5 / 18
5.3.24 5 / 18
5.3.22 5 / 21
5.3.20 5 / 6
5.3.19 5 / 6
5.3.17 5 / 5
5.3.16 5 / 5
5.3.15 5 / 5
5.3.14 5 / 5
5.3.13 5 / 5
5.3.12 5 / 5
5.3.11 5 / 5
5.3.10 5 / 5
5.3.8 5 / 5
5.3.7 5 / 5
5.3.6 5 / 4
5.3.5 5 / 4
5.3.4 5 / 4
5.3.3 7 / 3
5.3.2 7 / 3
5.3.1 7 / 3
5.3.0 7 / 3
5.2.27 7 / 3
5.2.25 7 / 3
5.2.24 7 / 3
5.2.23 7 / 3
5.2.22 7 / 3
5.2.20 7 / 3
5.2.19 7 / 3
5.2.18 8 / 3
5.2.17 8 / 3
5.2.16 8 / 3
5.2.14 8 / 3
5.2.13 8 / 3
5.2.12 8 / 3
5.2.11 8 / 3
5.2.10 8 / 3
5.2.9 8 / 3
5.2.8 8 / 3
5.2.7 8 / 3
5.2.6 8 / 3
5.2.5 8 / 3