odbc
1
Versions
—
License
Yes
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
abmussekadler
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| install-scripts | install-script:install | AI (install-scripts): Standard node-pre-gyp prebuilt-binary fetch with fallback-to-build; stable pattern for this native addon. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Requires resolved native binding path from node-pre-gyp binary.find(); not user-controlled input. | ai | |
| phantom-deps | phantom-dep:node-addon-api | AI (phantom-deps): node-addon-api is a build-time native addon dependency referenced in binding.gyp, not imported via require(). | ai |
Versions (showing 1 of 1)
| Version | Deps | Published |
|---|---|---|
| 2.5.0 | 3 / 5 |