mailparser
12
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
andris
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:libmime | AI (dependencies): libmime is a legitimate nodemailer-ecosystem library by the same author (Andris Reinman); stable dependency for this package. | ai | |
| dependencies | unvetted-dep:@zone-eu/mailsplit | AI (dependencies): @zone-eu/mailsplit is a legitimate email parsing library from the zone-eu/nodemailer ecosystem; stable dependency for this package. | ai | |
| dependencies | unvetted-dep:html-to-text | AI (dependencies): html-to-text is a well-established HTML conversion utility; no malicious signals; stable dependency for this package. | ai | |
| dependencies | unvetted-dep:encoding-japanese | AI (dependencies): encoding-japanese is a legitimate character encoding library; no malicious signals; stable dependency for this package. | ai |
Versions (showing 12 of 12)
| Version | Deps | Published |
|---|---|---|
| 3.9.14 | 10 / 13 | |
| 3.9.13 | 10 / 13 | |
| 3.9.12 | 10 / 13 | |
| 3.9.11 | 10 / 13 | |
| 3.9.10 | 10 / 13 | |
| 3.9.9 | 10 / 13 | |
| 3.9.8 | 10 / 13 | |
| 3.9.7 | 10 / 13 | |
| 3.9.6 | 10 / 13 | |
| 3.9.5 | 10 / 13 | |
| 3.9.4 | 10 / 13 | |
| 3.9.3 | 10 / 13 |
v3.9.14
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.9.13
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.