smbls — Greenflagged

[![npm version](https://img.shields.io/npm/v/smbls.svg)](https://www.npmjs.com/package/smbls) [![npm downloads](https://img.shields.io/npm/dm/smbls.svg)](https://www.npmjs.com/package/smbls) [![license](https://img.shields.io/npm/l/smbls.svg)](https://git

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

nikolozanikaotodesire_rawr

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
bogus-package	bogus-package	AI (bogus-package): Umbrella/meta package for symbo.ls ecosystem; sparse README is expected for this type of package.	ai	2026/05/30
phantom-deps	phantom-dep:@symbo.ls/cli	AI (phantom-deps): First-party scoped dep; config-only reference is expected for CLI tooling in this monorepo.	ai	2026/05/30
dependencies	unvetted-dep:@symbo.ls/uikit	AI (dependencies): First-party @symbo.ls scoped dep; stable false positive.	ai	2026/05/30
dependencies	unvetted-dep:@symbo.ls/smbls-utils	AI (dependencies): First-party @symbo.ls scoped dep; stable false positive.	ai	2026/05/30
dependencies	unvetted-dep:@symbo.ls/fetch	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/state	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/helmet	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/router	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/signal	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/analyze	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:domql	AI (dependencies): First-party ecosystem dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/element	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/scratch	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/polyglot	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/shorthand	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/default-config	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
phantom-deps	phantom-dep:domql	AI (phantom-deps): domql is a declared runtime dep; phantom-dep is a false positive here.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/capsize	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:css-in-props	AI (dependencies): First-party ecosystem dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/css	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29
dependencies	unvetted-dep:@symbo.ls/sync	AI (dependencies): Same-org scoped dep; stable pattern for this package.	ai	2026/05/29