grunt-lib-phantomjs
Grunt and PhantomJS, sitting in a tree
6
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
arknicowboyjsoversonjzaefferershamasindresorhustkellenvladikoff
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from vladikoff to arkni/shama is a documented Grunt team handoff; gruntjs org ownership confirmed by repository field. Stable for this package. | ai | |
| dependencies | unvetted-dep:phantomjs | AI (dependencies): phantomjs is the core dependency this package is explicitly designed to wrap; its presence is intentional and stable across all versions. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): shama (Kyle Robinson Young) is a known Grunt core contributor; addition is a legitimate org-level maintainer change, not a suspicious takeover. | ai |