graphile-test
PostGraphile Testing
6
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
pyramationluca608phatg
Keywords
testinggraphqlgraphileconstructivepgpmtest
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@launchql/env | AI (phantom-deps): Config-only reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@launchql/types | AI (phantom-deps): @launchql/types is a declared runtime dep from the same org; phantom-dep false positive for this package. | ai | |
| phantom-deps | phantom-dep:mock-req | AI (phantom-deps): Declared in deps; likely used transitively or in test helpers, not a security concern. | ai | |
| phantom-deps | phantom-dep:@pgpmjs/types | AI (phantom-deps): Types-only package; phantom-dep false positive common for type-only imports. | ai | |
| phantom-deps | phantom-dep:@constructive-io/graphql-env | AI (phantom-deps): Internal org package; likely re-exported or used indirectly, stable false positive. | ai | |
| phantom-deps | phantom-dep:@constructive-io/graphql-types | AI (phantom-deps): Internal org types package; phantom-dep heuristic unreliable for type-only usage. | ai |