oclif
oclif: create your own CLI
100
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
dickeyxxxrasphilcoamphrosalesforce-releasesmdonnalley
Keywords
oclifcli
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:env-spread | AI (semgrep): Standard pattern passing env to child process with NODE_ENV override; benign for this CLI tool. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Loads resolved @oclif/plugin-legacy path; stable plugin-compat pattern across versions. | ai | |
| phantom-deps | phantom-dep:@oclif/plugin-help | AI (phantom-deps): Referenced as oclif plugin in config, not a direct import; expected pattern. | ai | |
| phantom-deps | phantom-dep:@oclif/plugin-not-found | AI (phantom-deps): Referenced as oclif plugin in config, not a direct import; expected pattern. | ai | |
| phantom-deps | phantom-dep:@oclif/plugin-warn-if-update-available | AI (phantom-deps): Referenced as oclif plugin in config, not a direct import; expected pattern. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-perfectionist | AI (phantom-deps): ESLint plugin referenced in config files; standard pattern for linting deps. | ai |
Versions (showing 100 of 384)
| Version | Deps | Published |
|---|---|---|
| 4.15.27 | 24 / 34 | |
| 4.15.26 | 24 / 34 | |
| 4.15.25 | 24 / 34 | |
| 4.15.24 | 24 / 34 | |
| 4.15.23 | 24 / 34 | |
| 4.15.22 | 24 / 34 | |
| 4.15.21 | 24 / 34 | |
| 4.15.20 | 24 / 34 | |
| 4.15.19 | 24 / 34 | |
| 4.15.18 | 24 / 34 | |
| 4.15.17 | 24 / 34 | |
| 4.15.16 | 24 / 34 | |
| 4.15.15 | 24 / 34 | |
| 4.15.14 | 24 / 34 | |
| 4.15.13 | 24 / 34 | |
| 4.15.12 | 24 / 34 | |
| 4.15.11 | 24 / 34 | |
| 4.15.10 | 24 / 34 | |
| 4.15.9 | 24 / 34 | |
| 4.15.8 | 24 / 34 | |
| 4.15.7 | 24 / 34 | |
| 4.15.6 | 24 / 34 | |
| 4.15.5 | 24 / 34 | |
| 4.15.4 | 24 / 34 | |
| 4.15.3 | 24 / 34 | |
| 4.15.2 | 24 / 34 | |
| 4.15.1 | 24 / 34 | |
| 4.15.0 | 24 / 34 | |
| 4.14.36 | 24 / 34 | |
| 4.14.35 | 24 / 34 | |
| 4.14.34 | 24 / 34 | |
| 4.14.33 | 24 / 34 | |
| 4.14.32 | 24 / 34 | |
| 4.14.31 | 24 / 34 | |
| 4.14.30 | 24 / 34 | |
| 4.14.29 | 24 / 34 | |
| 4.14.28 | 24 / 34 | |
| 4.14.27 | 24 / 34 | |
| 4.14.26 | 24 / 34 | |
| 4.14.25 | 24 / 34 | |
| 4.14.24 | 24 / 34 | |
| 4.14.23 | 24 / 34 | |
| 4.14.22 | 24 / 34 | |
| 4.14.21 | 24 / 34 | |
| 4.14.20 | 24 / 34 | |
| 4.14.19 | 24 / 34 | |
| 4.14.18 | 24 / 34 | |
| 4.14.17 | 24 / 34 | |
| 4.14.16 | 24 / 34 | |
| 4.14.15 | 24 / 34 | |
| 4.14.14 | 24 / 34 | |
| 4.14.13 | 24 / 34 | |
| 4.14.12 | 24 / 34 | |
| 4.14.11 | 24 / 34 | |
| 4.14.10 | 24 / 34 | |
| 4.14.9 | 24 / 34 | |
| 4.14.8 | 24 / 34 | |
| 4.14.7 | 24 / 34 | |
| 4.14.6 | 24 / 34 | |
| 4.14.5 | 24 / 34 | |
| 4.14.4 | 24 / 34 | |
| 4.14.3 | 24 / 34 | |
| 4.14.2 | 24 / 34 | |
| 4.14.1 | 24 / 34 | |
| 4.14.0 | 24 / 34 | |
| 4.13.16 | 24 / 34 | |
| 4.13.15 | 24 / 34 | |
| 4.13.14 | 24 / 34 | |
| 4.13.13 | 24 / 34 | |
| 4.13.12 | 24 / 34 | |
| 4.13.11 | 24 / 34 | |
| 4.13.10 | 24 / 34 | |
| 4.13.9 | 24 / 34 | |
| 4.13.8 | 24 / 34 | |
| 4.13.7 | 24 / 34 | |
| 4.13.6 | 24 / 34 | |
| 4.13.5 | 24 / 34 | |
| 4.13.4 | 24 / 34 | |
| 4.13.3 | 24 / 34 | |
| 4.13.2 | 24 / 34 | |
| 4.13.1 | 24 / 34 | |
| 4.13.0 | 24 / 34 | |
| 4.12.4 | 24 / 34 | |
| 4.12.3 | 24 / 34 | |
| 4.12.2 | 24 / 34 | |
| 4.12.1 | 24 / 34 | |
| 4.12.0 | 24 / 34 | |
| 4.11.3 | 24 / 34 | |
| 4.11.2 | 24 / 34 | |
| 4.11.1 | 24 / 34 | |
| 4.11.0 | 24 / 34 | |
| 4.10.15 | 24 / 33 | |
| 4.10.14 | 24 / 33 | |
| 4.10.13 | 24 / 33 | |
| 4.10.12 | 24 / 33 | |
| 4.10.11 | 24 / 33 | |
| 4.10.10 | 24 / 33 | |
| 4.10.9 | 24 / 33 | |
| 4.10.8 | 24 / 33 | |
| 4.10.7 | 24 / 33 |
Showing 100 of 384
Next page →
v4.10.9
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.10.8
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.10.7
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.