swagger-typescript-api
Generate the API client for Fetch or Axios from an OpenAPI Specification
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@types/lodash | AI (phantom-deps): @types/lodash is a type-only dep used by TypeScript tooling; stable false positive for this package. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): SLSA provenance attestation via Sigstore confirms CI/CD publish; mitigates account-takeover concern for this established package. | ai | |
| dependencies | unvetted-dep:swagger-schema-official | AI (dependencies): swagger-schema-official is a known companion schema package; stable dependency for this tool across versions. | ai | |
| phantom-deps | phantom-dep:@biomejs/wasm-nodejs | AI (phantom-deps): Wasm runtime loaded indirectly via @biomejs/js-api; not directly imported by convention. | ai | |
| phantom-deps | phantom-dep:@types/swagger-schema-official | AI (phantom-deps): Type-only package; not directly imported at runtime by design. | ai |
Versions (showing 16 of 16)
| Version | Deps | Published |
|---|---|---|
| 13.11.0 | 17 / 11 | |
| 13.7.2 | 17 / 11 | |
| 13.7.1 | 17 / 11 | |
| 13.7.0 | 17 / 11 | |
| 13.6.11 | 17 / 11 | |
| 13.6.7 | 17 / 11 | |
| 13.6.5 | 17 / 11 | |
| 13.6.1 | 17 / 11 | |
| 13.6.0 | 17 / 11 | |
| 13.4.0 | 17 / 11 | |
| 13.3.1 | 17 / 11 | |
| 13.3.0 | 17 / 11 | |
| 13.2.18 | 15 / 11 | |
| 13.2.17 | 14 / 11 | |
| 13.2.15 | 15 / 11 | |
| 13.2.0 | 13 / 14 |
v13.11.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.7.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.6.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.4.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.3.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.3.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.2.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.2.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.2.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.2.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.