content-type
Create and parse HTTP Content-Type header
8
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ulisesgasconblakeembreydougwilson
Keywords
content-typehttpreqresrfc7231rfc9110
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| email-domain | unclaimed-email:https://github.com/acubed | AI (email-domain): False positive: the author field contains a GitHub URL, not an email address. The 'domain' is a URL parsed incorrectly. | ai | |
| maintainer-change | maintainer-takeover | AI (maintainer-change): Legitimate transfer from deoxxa to dougwilson within jshttp org in 2015; dougwilson is the established maintainer. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Removal of deoxxa was part of the legitimate 2015 maintainer transition. | ai | |
| provenance | publisher-changed | AI (provenance): Legitimate maintainer transition from deoxxa to dougwilson within jshttp org in 2015; dougwilson is a trusted long-standing maintainer. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): dougwilson added as maintainer ~2015; well-established jshttp/Express ecosystem maintainer with extensive track record. | ai | |
| provenance | no-provenance | AI (provenance): Package predates Sigstore provenance; no provenance is expected for packages from this era. | ai |