@zuplo/otel
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:ts-checked-fsm | AI (phantom-deps): ts-checked-fsm is a declared dependency used in build config; phantom-dep false positive for this bundled package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Internal utility package in a large corporate monorepo; missing README/keywords/description is consistent with the package's nature across all 1493 versions. | ai | |
| phantom-deps | phantom-dep:@opentelemetry/api-logs | AI (phantom-deps): Package bundles its deps into ESM output; @opentelemetry/api-logs is declared in dependencies. Not a true phantom dep. | ai | |
| phantom-deps | phantom-dep:@opentelemetry/resources | AI (phantom-deps): Package bundles its deps into ESM output; @opentelemetry/resources is declared in dependencies. Not a true phantom dep. | ai | |
| phantom-deps | phantom-dep:@opentelemetry/otlp-transformer | AI (phantom-deps): Package bundles its deps into ESM output; @opentelemetry/otlp-transformer is declared in dependencies. Not a true phantom dep. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Fired on standard bundler output (esbuild/rollup minification). The sample shows Object.defineProperty for function naming, not malicious Reflect.get() usage. False positive for this bundled package. | ai | |
| phantom-deps | phantom-dep:@opentelemetry/semantic-conventions | AI (phantom-deps): Package bundles its deps into ESM output; @opentelemetry/semantic-conventions is declared in dependencies. Not a true phantom dep. | ai | |
| phantom-deps | phantom-dep:@opentelemetry/exporter-trace-otlp-http | AI (phantom-deps): Package bundles its deps into ESM output; @opentelemetry/exporter-trace-otlp-http is declared in dependencies. Not a true phantom dep. | ai | |
| phantom-deps | phantom-dep:@opentelemetry/otlp-exporter-base | AI (phantom-deps): Package bundles its deps into ESM output; @opentelemetry/otlp-exporter-base is declared in dependencies. Not a true phantom dep. | ai | |
| phantom-deps | phantom-dep:@opentelemetry/core | AI (phantom-deps): Package bundles its deps into ESM output; @opentelemetry/core is declared in dependencies. Not a true phantom dep. | ai |
Versions (showing 100 of 1089)
| Version | Deps | Published |
|---|---|---|
| 6.73.18 | 10 / 2 | |
| 6.73.17 | 10 / 2 | |
| 6.73.16 | 10 / 2 | |
| 6.73.15 | 10 / 2 | |
| 6.73.14 | 10 / 2 | |
| 6.73.13 | 10 / 2 | |
| 6.73.12 | 10 / 2 | |
| 6.73.11 | 10 / 2 | |
| 6.73.10 | 10 / 2 | |
| 6.73.8 | 10 / 2 | |
| 6.73.7 | 10 / 2 | |
| 6.73.6 | 10 / 2 | |
| 6.73.5 | 10 / 2 | |
| 6.73.4 | 10 / 2 | |
| 6.73.3 | 10 / 2 | |
| 6.73.2 | 10 / 2 | |
| 6.73.1 | 10 / 2 | |
| 6.73.0 | 10 / 2 | |
| 6.72.17 | 10 / 2 | |
| 6.72.16 | 10 / 2 | |
| 6.72.15 | 10 / 2 | |
| 6.72.14 | 10 / 2 | |
| 6.72.13 | 10 / 2 | |
| 6.72.12 | 10 / 2 | |
| 6.72.11 | 10 / 2 | |
| 6.72.10 | 10 / 2 | |
| 6.72.9 | 10 / 2 | |
| 6.72.8 | 10 / 2 | |
| 6.72.7 | 10 / 2 | |
| 6.72.3 | 10 / 2 | |
| 6.72.2 | 10 / 2 | |
| 6.72.1 | 10 / 2 | |
| 6.72.0 | 10 / 2 | |
| 6.71.27 | 10 / 2 | |
| 6.71.26 | 10 / 2 | |
| 6.71.25 | 10 / 2 | |
| 6.71.23 | 10 / 2 | |
| 6.71.22 | 10 / 2 | |
| 6.71.21 | 10 / 2 | |
| 6.71.20 | 10 / 2 | |
| 6.71.19 | 10 / 2 | |
| 6.71.18 | 10 / 2 | |
| 6.71.17 | 10 / 2 | |
| 6.71.16 | 10 / 2 | |
| 6.71.15 | 10 / 2 | |
| 6.71.14 | 10 / 2 | |
| 6.71.13 | 10 / 2 | |
| 6.71.12 | 10 / 2 | |
| 6.71.11 | 10 / 2 | |
| 6.71.10 | 10 / 2 | |
| 6.71.9 | 10 / 2 | |
| 6.71.8 | 10 / 2 | |
| 6.71.7 | 10 / 2 | |
| 6.71.6 | 10 / 2 | |
| 6.71.3 | 10 / 2 | |
| 6.71.2 | 10 / 2 | |
| 6.71.1 | 10 / 2 | |
| 6.71.0 | 10 / 2 | |
| 6.70.71 | 10 / 2 | |
| 6.70.70 | 10 / 2 | |
| 6.70.69 | 10 / 2 | |
| 6.70.68 | 10 / 2 | |
| 6.70.67 | 10 / 2 | |
| 6.70.66 | 10 / 2 | |
| 6.70.63 | 10 / 2 | |
| 6.70.62 | 10 / 2 | |
| 6.70.61 | 10 / 2 | |
| 6.70.60 | 10 / 2 | |
| 6.70.59 | 10 / 2 | |
| 6.70.57 | 10 / 2 | |
| 6.70.56 | 10 / 2 | |
| 6.70.55 | 10 / 2 | |
| 6.70.54 | 10 / 2 | |
| 6.70.53 | 10 / 2 | |
| 6.70.51 | 10 / 2 | |
| 6.70.50 | 10 / 2 | |
| 6.70.49 | 10 / 2 | |
| 6.70.48 | 10 / 2 | |
| 6.70.47 | 10 / 2 | |
| 6.70.46 | 10 / 2 | |
| 6.70.45 | 10 / 2 | |
| 6.70.44 | 10 / 2 | |
| 6.70.43 | 10 / 2 | |
| 6.70.42 | 10 / 2 | |
| 6.70.41 | 10 / 2 | |
| 6.70.40 | 10 / 2 | |
| 6.70.39 | 10 / 2 | |
| 6.70.37 | 10 / 2 | |
| 6.70.36 | 10 / 2 | |
| 6.70.35 | 10 / 2 | |
| 6.70.34 | 10 / 2 | |
| 6.70.33 | 10 / 2 | |
| 6.70.32 | 10 / 2 | |
| 6.70.31 | 10 / 2 | |
| 6.70.30 | 10 / 2 | |
| 6.70.29 | 10 / 2 | |
| 6.70.28 | 10 / 2 | |
| 6.70.27 | 10 / 2 | |
| 6.70.26 | 10 / 2 | |
| 6.70.25 | 10 / 2 |
v6.73.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.16
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.15
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.14
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.73.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.16
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.15
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.14
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.72.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.71.27
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.71.26
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.71.25
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.71.23
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.71.22
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.71.21
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.