pgpm
PostgreSQL Package Manager - Database migration and package management CLI
100
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
pyramationluca608phatg
Keywords
clicommand-linetoolpostgrespostgresqlmigrationpackage-managerdatabasepgpgsql
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@pgpmjs/slice | AI (dependencies): First-party sibling package in the same @pgpmjs org as other deps. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): Adding an in-house @pgpmjs package is expected for this ecosystem. | ai | |
| dependencies | unvetted-dep:@launchql/core | AI (dependencies): Same org/publisher as pgpm; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@launchql/env | AI (dependencies): Same org/publisher as pgpm; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@launchql/types | AI (dependencies): Same org/publisher as pgpm; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@launchql/logger | AI (dependencies): Same org/publisher as pgpm; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@launchql/server | AI (dependencies): Same org/publisher as pgpm; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@launchql/explorer | AI (dependencies): Same org/publisher as pgpm; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@launchql/templatizer | AI (dependencies): Same org/publisher as pgpm; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@launchql/server-utils | AI (dependencies): Same org/publisher as pgpm; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@launchql/server-utils | AI (phantom-deps): Config-file reference only; stable false positive for this CLI package. | ai | |
| phantom-deps | phantom-dep:find-and-require-package-json | AI (phantom-deps): Config-referenced utility; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:js-yaml | AI (phantom-deps): Config-referenced utility; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:shelljs | AI (phantom-deps): Config-referenced utility; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:appstash | AI (phantom-deps): Config-referenced utility; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:yanse | AI (phantom-deps): Config-referenced utility; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:pgsql-deparser | AI (phantom-deps): Config-referenced utility; stable pattern for this package. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): pgpm is a distinct PostgreSQL package manager CLI, not a typosquat of pg. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Spreading process.env is standard for passing environment variables to child processes in a deployment CLI. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): CLI deploy tool legitimately uses child_process for executing database/system commands. | ai |
Versions (showing 100 of 247)
| Version | Deps | Published |
|---|---|---|
| 4.19.1 | 18 / 10 | |
| 4.19.0 | 18 / 10 | |
| 4.18.1 | 18 / 10 | |
| 4.18.0 | 18 / 10 | |
| 4.17.1 | 18 / 10 | |
| 4.17.0 | 18 / 10 | |
| 4.16.6 | 18 / 10 | |
| 4.16.5 | 18 / 10 | |
| 4.16.4 | 18 / 10 | |
| 4.16.3 | 18 / 10 | |
| 4.16.2 | 18 / 10 | |
| 4.16.1 | 18 / 10 | |
| 4.16.0 | 18 / 10 | |
| 4.15.0 | 18 / 10 | |
| 4.14.1 | 18 / 10 | |
| 4.14.0 | 18 / 10 | |
| 4.13.0 | 18 / 10 | |
| 4.12.0 | 18 / 10 | |
| 4.11.1 | 18 / 10 | |
| 4.11.0 | 18 / 10 | |
| 4.10.8 | 18 / 10 | |
| 4.10.7 | 18 / 10 | |
| 4.10.6 | 18 / 10 | |
| 4.10.5 | 18 / 10 | |
| 4.10.4 | 18 / 10 | |
| 4.10.3 | 18 / 10 | |
| 4.10.2 | 18 / 10 | |
| 4.10.1 | 18 / 10 | |
| 4.10.0 | 18 / 10 | |
| 4.9.1 | 18 / 10 | |
| 4.9.0 | 18 / 10 | |
| 4.8.4 | 18 / 10 | |
| 4.8.3 | 18 / 10 | |
| 4.8.1 | 18 / 10 | |
| 4.8.0 | 18 / 10 | |
| 4.7.9 | 17 / 10 | |
| 4.7.8 | 17 / 10 | |
| 4.7.7 | 17 / 10 | |
| 4.7.6 | 17 / 10 | |
| 4.7.5 | 17 / 10 | |
| 4.7.4 | 17 / 10 | |
| 4.7.3 | 17 / 10 | |
| 4.7.2 | 17 / 10 | |
| 4.7.1 | 17 / 10 | |
| 4.7.0 | 17 / 10 | |
| 4.6.2 | 17 / 10 | |
| 4.4.1 | 17 / 10 | |
| 4.4.0 | 17 / 10 | |
| 4.3.1 | 16 / 10 | |
| 4.3.0 | 16 / 10 | |
| 4.2.4 | 16 / 10 | |
| 4.2.3 | 16 / 10 | |
| 4.2.2 | 16 / 10 | |
| 4.2.1 | 16 / 10 | |
| 4.2.0 | 16 / 10 | |
| 4.1.0 | 16 / 10 | |
| 4.0.1 | 16 / 10 | |
| 4.0.0 | 16 / 10 | |
| 3.3.2 | 16 / 10 | |
| 3.3.1 | 16 / 10 | |
| 3.3.0 | 16 / 10 | |
| 3.2.1 | 16 / 10 | |
| 3.2.0 | 16 / 10 | |
| 3.1.1 | 16 / 10 | |
| 3.1.0 | 16 / 10 | |
| 3.0.1 | 16 / 10 | |
| 3.0.0 | 16 / 10 | |
| 2.12.1 | 16 / 10 | |
| 2.12.0 | 16 / 10 | |
| 2.11.1 | 17 / 11 | |
| 2.11.0 | 17 / 11 | |
| 2.10.15 | 17 / 11 | |
| 2.10.14 | 17 / 11 | |
| 2.10.13 | 17 / 11 | |
| 2.10.11 | 17 / 11 | |
| 2.10.10 | 17 / 11 | |
| 2.10.9 | 17 / 11 | |
| 2.10.8 | 17 / 11 | |
| 2.10.7 | 17 / 11 | |
| 2.10.6 | 17 / 11 | |
| 2.10.5 | 17 / 11 | |
| 2.10.4 | 17 / 11 | |
| 2.10.3 | 17 / 11 | |
| 2.10.2 | 17 / 11 | |
| 2.10.1 | 17 / 11 | |
| 2.10.0 | 16 / 11 | |
| 2.9.1 | 16 / 11 | |
| 2.9.0 | 16 / 11 | |
| 2.8.0 | 16 / 11 | |
| 2.7.11 | 16 / 11 | |
| 2.7.10 | 16 / 11 | |
| 2.7.9 | 16 / 11 | |
| 2.7.8 | 16 / 11 | |
| 2.7.7 | 16 / 11 | |
| 2.7.6 | 16 / 11 | |
| 2.7.5 | 16 / 11 | |
| 2.7.4 | 16 / 11 | |
| 2.7.3 | 16 / 11 | |
| 2.7.2 | 16 / 11 | |
| 2.7.1 | 16 / 11 |
Showing 100 of 247
Next page →