constructs
A programming model for software-defined state
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:lib/private/dependency.js | AI (source-diff): Compiled jsii output, readable source with docstrings; not obfuscation. | ai | |
| source-diff | obfuscated-file-transition:lib/private/uniqueid.js | AI (source-diff): jsii build-output long-line FP; sample is plain readable JS. | ai |
Versions (showing 51 of 531)
| Version | Deps | Published |
|---|---|---|
| 10.7.1 | 0 / 21 | |
| 10.7.0 | 0 / 21 | |
| 10.6.0 | 0 / 21 | |
| 10.5.1 | 0 / 21 | |
| 10.5.0 | 0 / 21 | |
| 10.4.5 | 0 / 21 | |
| 10.4.4 | 0 / 21 | |
| 10.4.3 | 0 / 21 | |
| 10.4.2 | 0 / 20 | |
| 10.4.1 | 0 / 20 | |
| 10.4.0 | 0 / 20 | |
| 10.3.2 | 0 / 20 | |
| 10.3.1 | 0 / 20 | |
| 10.3.0 | 0 / 22 | |
| 10.2.70 | 0 / 22 | |
| 10.2.69 | 0 / 22 | |
| 10.2.68 | 0 / 22 | |
| 10.2.67 | 0 / 21 | |
| 10.2.66 | 0 / 21 | |
| 10.2.65 | 0 / 21 | |
| 10.2.64 | 0 / 21 | |
| 10.2.63 | 0 / 21 | |
| 10.2.62 | 0 / 21 | |
| 10.2.61 | 0 / 21 | |
| 10.2.60 | 0 / 21 | |
| 10.2.59 | 0 / 21 | |
| 10.2.58 | 0 / 21 | |
| 10.2.57 | 0 / 21 | |
| 10.2.56 | 0 / 21 | |
| 10.2.55 | 0 / 21 | |
| 10.2.54 | 0 / 21 | |
| 10.2.53 | 0 / 21 | |
| 10.2.52 | 0 / 21 | |
| 10.2.51 | 0 / 20 | |
| 10.2.50 | 0 / 20 | |
| 10.2.49 | 0 / 20 | |
| 10.2.48 | 0 / 20 | |
| 10.2.47 | 0 / 20 | |
| 10.2.46 | 0 / 20 | |
| 10.2.45 | 0 / 20 | |
| 10.2.44 | 0 / 20 | |
| 10.2.43 | 0 / 20 | |
| 10.2.42 | 0 / 20 | |
| 10.2.41 | 0 / 20 | |
| 10.2.40 | 0 / 20 | |
| 10.2.39 | 0 / 20 | |
| 10.2.38 | 0 / 20 | |
| 10.2.37 | 0 / 20 | |
| 10.2.36 | 0 / 20 | |
| 10.2.35 | 0 / 20 | |
| 10.2.34 | 0 / 20 |
v10.7.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v10.7.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v10.4.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v10.4.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v10.4.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v10.3.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v10.3.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v10.3.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.70
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.69
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.68
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.67
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.66
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.65
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.64
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.63
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.62
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.61
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.60
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.59
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.58
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.56
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.55
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.54
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.53
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.52
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.51
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.50
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.49
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.48
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.47
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.46
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.45
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.44
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.43
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.42
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.41
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.40
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.39
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.38
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.37
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.36
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.35
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v10.2.34
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.