figgy-pudding
Delicious, festive, cascading config/opts definitions
14
Versions
ISC
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
adam_baldwinclaudiahdzdarcyclarkeisaacsruyadorno
Keywords
configoptionsyummy
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-takeover | AI (maintainer-change): Maintainer change reflects npm CLI team reorganization (~2020); all new maintainers are known npm Inc./GitHub employees. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher change from zkat to isaacs is a known npm team transition, not account compromise. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainers are all recognized npm Inc./GitHub staff (isaacs, darcyclarke, claudiahdz, ruyadorno, adam_baldwin). | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Removed maintainers (iarna, zkat) left npm Inc.; removal is expected organizational change. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Package is effectively archived/maintenance-mode; infrequent publishes are expected for stable utility. | ai |