ibm-cloud-sdk-core
Core functionality to support SDKs generated with IBM's OpenAPI SDK Generator.
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ibm-cloud-tools-ownerdpopp07ibm-devx-sdk
Keywords
ibmsdkopenapicore
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from individual IBM dev (dpopp07) to IBM team account (ibm-devx-sdk) with 157 approved packages. Legitimate org transition. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): @types packages are loaded by TypeScript convention, not direct import. Standard for TS projects. | ai | |
| phantom-deps | phantom-dep:@types/isstream | AI (phantom-deps): @types packages are loaded by TypeScript convention, not direct import. | ai | |
| phantom-deps | phantom-dep:@types/file-type | AI (phantom-deps): @types packages are loaded by TypeScript convention, not direct import. | ai | |
| phantom-deps | phantom-dep:@types/tough-cookie | AI (phantom-deps): @types packages are loaded by TypeScript convention, not direct import. | ai |
Versions (showing 51 of 161)
| Version | Deps | Published |
|---|---|---|
| 5.6.0 | 16 / 0 | |
| 5.5.0 | 16 / 0 | |
| 5.4.22 | 16 / 0 | |
| 5.4.21 | 16 / 0 | |
| 5.4.20 | 16 / 0 | |
| 5.4.19 | 16 / 0 | |
| 5.4.18 | 16 / 0 | |
| 5.4.17 | 15 / 0 | |
| 5.4.16 | 15 / 0 | |
| 5.4.15 | 15 / 0 | |
| 5.4.14 | 16 / 0 | |
| 5.4.13 | 16 / 0 | |
| 5.4.12 | 16 / 0 | |
| 5.4.11 | 16 / 0 | |
| 5.4.10 | 16 / 0 | |
| 5.4.9 | 16 / 0 | |
| 5.4.8 | 15 / 0 | |
| 5.4.7 | 15 / 0 | |
| 5.4.6 | 15 / 0 | |
| 5.4.5 | 15 / 0 | |
| 5.4.4 | 15 / 0 | |
| 5.4.3 | 15 / 0 | |
| 5.4.2 | 15 / 0 | |
| 5.4.1 | 15 / 0 | |
| 5.4.0 | 15 / 0 | |
| 5.3.2 | 15 / 0 | |
| 5.3.1 | 15 / 0 | |
| 5.3.0 | 15 / 0 | |
| 5.2.0 | 15 / 0 | |
| 5.1.4 | 15 / 0 | |
| 5.1.3 | 15 / 0 | |
| 5.1.2 | 15 / 0 | |
| 5.1.1 | 15 / 0 | |
| 5.1.0 | 15 / 0 | |
| 5.0.2 | 15 / 0 | |
| 5.0.1 | 15 / 0 | |
| 5.0.0 | 15 / 0 | |
| 4.3.3 | 16 / 0 | |
| 4.3.2 | 15 / 0 | |
| 4.3.1 | 18 / 0 | |
| 4.3.0 | 18 / 0 | |
| 4.2.5 | 19 / 0 | |
| 4.2.4 | 19 / 0 | |
| 4.2.3 | 19 / 0 | |
| 4.2.2 | 19 / 0 | |
| 4.2.1 | 19 / 0 | |
| 4.2.0 | 19 / 0 | |
| 4.1.5 | 19 / 0 | |
| 4.1.4 | 18 / 0 | |
| 4.1.3 | 18 / 0 | |
| 4.1.2 | 18 / 0 |
v5.6.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.