inngest
Official SDK for Inngest.com. Inngest is the reliability layer for modern applications. Inngest combines durable execution, events, and queues into a zero-infra platform with built-in observability.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@types/ms | AI (dependencies): @types/ms is a TypeScript type definitions package with no executable code; safe as a runtime dep for this SDK which already depends on ms. | ai | |
| phantom-deps | phantom-dep:@types/ms | AI (phantom-deps): TypeScript type declaration package; not directly imported at runtime. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@types/debug | AI (phantom-deps): TypeScript type declaration package; not directly imported at runtime. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:temporal-polyfill | AI (phantom-deps): Referenced in config files for optional temporal API support; not directly imported. Expected pattern for this SDK. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Base64 decoding in lambda.cjs handles AWS Lambda's isBase64Encoded flag — standard Lambda HTTP adapter pattern, not malicious payload hiding. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get() in middleware/logger.cjs implements a transparent Proxy delegation pattern for logger wrapping — standard JS idiom, not evasion. | ai |
Versions (showing 37 of 37)
| Version | Deps | Published |
|---|---|---|
| 4.13.0 | 24 / 51 | |
| 4.12.1 | 24 / 51 | |
| 4.12.0 | 24 / 51 | |
| 4.11.0 | 24 / 51 | |
| 4.10.0 | 24 / 51 | |
| 4.9.0 | 24 / 51 | |
| 4.8.0 | 24 / 51 | |
| 4.7.0 | 24 / 51 | |
| 4.6.0 | 24 / 51 | |
| 4.5.1 | 24 / 51 | |
| 4.5.0 | 24 / 51 | |
| 4.4.0 | 24 / 50 | |
| 4.3.0 | 24 / 50 | |
| 4.2.6 | 24 / 50 | |
| 4.2.5 | 24 / 50 | |
| 4.2.4 | 24 / 50 | |
| 4.2.3 | 24 / 50 | |
| 4.2.2 | 24 / 50 | |
| 4.2.1 | 24 / 50 | |
| 4.2.0 | 24 / 50 | |
| 4.1.2 | 24 / 50 | |
| 4.1.1 | 24 / 50 | |
| 4.1.0 | 24 / 48 | |
| 4.0.5 | 24 / 45 | |
| 4.0.4 | 24 / 45 | |
| 4.0.3 | 24 / 45 | |
| 4.0.2 | 24 / 45 | |
| 4.0.1 | 24 / 45 | |
| 4.0.0 | 24 / 45 | |
| 3.54.2 | 26 / 43 | |
| 3.54.1 | 26 / 43 | |
| 3.53.1 | 26 / 43 | |
| 3.46.0 | 24 / 44 | |
| 3.45.1 | 24 / 44 | |
| 3.45.0 | 24 / 44 | |
| 3.44.5 | 23 / 44 | |
| 3.44.4 | 23 / 44 |
v4.13.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.12.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.12.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.11.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.10.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.9.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.8.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.6.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.5.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.5.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.4.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.3.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.2.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.2.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.2.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.1.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v4.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.54.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.