← Home

rxdb

npm Repository Homepage
4
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

pubkey

Keywords

dbdatabaseoffline-firstlocal-firstlocal firstnosqlno-sqljsonschemaschemarxjspwaprogessive web apphybrid applocalstorageindexeddbstoragereact-nativeencryptionencryptedpouchdbnatswebsqlsqlitequerylive-queryrealtime queryreactivereplicationrealtimerealtime databaselocal databaseembedded databasein-memorymemorymemory databaselocal databaseembeddedembedelectron databasemongodblokijsJSONangular databasereact databasecapacitor databasenode.js databasedocumentfile databasejson databasekey value databasedatabase driverdatabase abstraction layerdocument databasegraph databasemock databasecross-databaseasyncstoragelocalforagemongoosemigrate databasewebsocket databasedatabase-clientdbmsdatabase enginedatastoresupabasemongodbappwritecouchdbfirestorefirebase

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:rxjs AI (typosquat): rxdb is a well-known reactive database library, not a typosquat of rxjs; stable false positive. ai
phantom-deps phantom-dep:util AI (phantom-deps): Node built-in; phantom-dep false positive for this package. ai
phantom-deps phantom-dep:graphql AI (phantom-deps): Optional peer dependency used in graphql plugin; not a phantom dep concern. ai
phantom-deps phantom-dep:@types/ws AI (phantom-deps): Type-only package; framework-scoped, stable false positive. ai
phantom-deps phantom-dep:@types/cors AI (phantom-deps): Type-only package; framework-scoped, stable false positive. ai
phantom-deps phantom-dep:@types/clone AI (phantom-deps): Type-only package; framework-scoped, stable false positive. ai
phantom-deps phantom-dep:@types/express AI (phantom-deps): Type-only package; framework-scoped, stable false positive. ai
phantom-deps phantom-dep:@types/simple-peer AI (phantom-deps): Type-only package; framework-scoped, stable false positive. ai
semgrep semgrep:new-function-constructor AI (semgrep): Used in a build-time script to extract error messages; not runtime code shipped to users. ai

Versions (showing 4 of 4)

Version Deps Published
17.3.0 24 / 113
17.2.0 24 / 113
17.1.0 28 / 126
17.0.0 28 / 126

v17.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v17.2.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v17.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.