string-hash
fast string hashing function
3
Versions
CC0-1.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
darkskyapp
Keywords
stringhashing
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| bogus-package | bogus-package | AI (bogus-package): Tiny single-function utility with 4.4M weekly downloads; small payload and simple README are expected, not spam indicators. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): Rapid publish between v1.1.2 and v1.1.3 is explained by a trivial follow-up change (adding a test script). Package is 13+ years old with a clean history. | ai | |
| provenance | no-provenance | AI (provenance): Package predates Sigstore provenance by many years; absence is expected for this legacy utility package. | ai |