@ghostery/trackerdb
Ghostery Tracker Database
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:enolib | AI (dependencies): Small ENO parsing library; no known advisories; stable dependency for this package. | ai | |
| dependencies | unvetted-dep:iso-3166-1-alpha-2 | AI (dependencies): Tiny country-code lookup library; no known advisories; stable dependency for this package. | ai | |
| phantom-deps | phantom-dep:enolib | AI (phantom-deps): Used in build/export scripts for ENO config parsing; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:iso-3166-1-alpha-2 | AI (phantom-deps): Country code lookup utility used in build scripts; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tldts-experimental | AI (phantom-deps): TLD resolution used in tracker DB processing; stable false positive for this package. | ai |
Versions (showing 7 of 107)
| Version | Deps | Published |
|---|---|---|
| 1.0.772 | 4 / 15 | |
| 1.0.771 | 4 / 15 | |
| 1.0.770 | 4 / 15 | |
| 1.0.769 | 4 / 15 | |
| 1.0.768 | 4 / 15 | |
| 1.0.767 | 4 / 15 | |
| 1.0.766 | 4 / 15 |
v1.0.772
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.771
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.770
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.769
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.768
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.767
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.766
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.