@auto-it/core
Node API for using auto.
53
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
alisowski
Keywords
automationsemanticreleasegithublabelsautomatedcontinuos integrationchangelognode
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @auto-it/core is the core module of Intuit's 'auto' release tool; name similarity to 'cors' is purely coincidental. Scoped package, established publisher. | ai | |
| dependencies | unvetted-dep:ts-node | AI (dependencies): ts-node is a well-known TypeScript execution tool used legitimately by @auto-it/core for loading TypeScript config files. Stable, expected dependency for this package. | ai | |
| phantom-deps | phantom-dep:type-fest | AI (phantom-deps): type-fest is used for TypeScript type utilities; declared in package.json for type-level usage. Not a security concern for this package. | ai | |
| phantom-deps | phantom-dep:@octokit/core | AI (phantom-deps): @octokit/core is referenced in config/type contexts as part of the GitHub API integration. Phantom dep pattern is expected here. | ai |
Versions (showing 53 of 453)
| Version | Deps | Published |
|---|---|---|
| 7.12.5 | 24 / 14 | |
| 7.12.4 | 24 / 14 | |
| 7.12.3 | 24 / 14 | |
| 7.12.2 | 25 / 14 | |
| 7.12.1 | 25 / 14 | |
| 7.12.0 | 25 / 14 | |
| 7.11.0 | 25 / 14 | |
| 7.10.0 | 25 / 14 | |
| 7.9.2 | 25 / 14 | |
| 7.9.1 | 25 / 14 | |
| 7.9.0 | 25 / 14 | |
| 7.8.0 | 24 / 14 | |
| 7.7.0 | 23 / 14 | |
| 7.6.2 | 23 / 14 | |
| 7.6.1 | 23 / 14 | |
| 7.6.0 | 23 / 14 | |
| 7.5.0 | 23 / 14 | |
| 7.4.5 | 23 / 14 | |
| 7.4.4 | 23 / 14 | |
| 7.4.3 | 23 / 14 | |
| 7.4.2 | 23 / 14 | |
| 7.4.1 | 23 / 14 | |
| 7.4.0 | 23 / 14 | |
| 7.3.6 | 23 / 14 | |
| 7.3.5 | 23 / 14 | |
| 7.3.4 | 22 / 14 | |
| 7.3.3 | 22 / 14 | |
| 7.3.2 | 23 / 14 | |
| 7.3.1 | 23 / 14 | |
| 7.3.0 | 23 / 14 | |
| 7.2.3 | 23 / 14 | |
| 7.2.2 | 23 / 14 | |
| 7.2.1 | 23 / 14 | |
| 7.2.0 | 23 / 14 | |
| 7.1.4 | 23 / 14 | |
| 7.1.3 | 23 / 14 | |
| 7.1.2 | 23 / 14 | |
| 7.1.1 | 23 / 14 | |
| 7.1.0 | 23 / 14 | |
| 7.0.13 | 23 / 14 | |
| 7.0.12 | 23 / 14 | |
| 7.0.11 | 23 / 14 | |
| 7.0.10 | 23 / 14 | |
| 7.0.9 | 23 / 14 | |
| 7.0.8 | 23 / 14 | |
| 7.0.7 | 23 / 14 | |
| 7.0.6 | 23 / 14 | |
| 7.0.5 | 23 / 14 | |
| 7.0.4 | 23 / 14 | |
| 7.0.3 | 23 / 14 | |
| 7.0.2 | 23 / 14 | |
| 7.0.1 | 23 / 14 | |
| 7.0.0 | 23 / 14 |