17,096 packages matching compliance evidence

@regixo/ports

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Interfaces only — the stable seam Regixo's separate proprietary paid layer implements. Contains NO paid logic.

375Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.

a2a-trustgate

v1.5.15 · 2 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A2A TrustGate CLI — Safety, compliance, and governance for AI agents. Screen every action before it executes.

345Downloads across all versions in the last 7 days, from the official npm downloads API.SEE LICENSE IN LICENSELicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.5.15 (the latest release), from the OSV.dev database.

babel-preset-expo

v57.0.6 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

The Babel preset for Expo projects

8.1MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v57.0.6 (the latest release), from the OSV.dev database.

@regixo/scanner

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Regixo's scanner — drives connectors, extracts metadata, builds the local-first catalog map. Reads metadata only (names, types, owners, lineage) — never row values.

341Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.

license-compliance

v4.0.0 · 8 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

License compliance checker

15.2KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.0.0 (the latest release), from the OSV.dev database.

@img/sharp-linux-x64

v0.35.3 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Prebuilt sharp for use with Linux (glibc) x64

72.8MDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.35.3 (the latest release), from the OSV.dev database.

@regixo/web-data-lens

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Regixo's free portal — the data map, drafted RoPA/DORA record, and the versioned /api/v1 read API, server-rendered from the local Node process (no SPA framework). Default port 4319, loopback-only.

352Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.

@mixmark-io/domino

v2.2.0 · 2 years ago

90
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Server-side DOM implementation based on Mozilla's dom.js

5.4MDownloads across all versions in the last 7 days, from the official npm downloads API.BSD-2-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.2.0 (the latest release), from the OSV.dev database.

@regixo/connectors

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Per-source adapters (kinds: sql · saas · manual · dbt · script). test() + discover(), metadata only. Built-in: Postgres · MySQL · SQL Server · Redshift · Snowflake · BigQuery · Stripe · dbt · CSV, plus agent-authored (BYOC) script connectors.

350Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.

@jordannewell/curtis-compliance

v1.3.1 · 10 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Open-source compliance checks for fintech code — pre-commit, PR review, and a hash-chained audit trail.

206Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.3.1 (the latest release), from the OSV.dev database.

@pulumi/compliance-policy-manager

v0.1.6 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

19.5KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.6 (the latest release), from the OSV.dev database.

@img/sharp-linuxmusl-x64

v0.35.3 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Prebuilt sharp for use with Linux (musl) x64

45.4MDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.35.3 (the latest release), from the OSV.dev database.

@testmuai/evidence-cli

v0.1.7 · 18 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

An open, framework-agnostic format for what a test run produced — the .evidence pack, and the library + CLI that validate and seal it.

11.4KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.7 (the latest release), from the OSV.dev database.

@paybond/kit

v0.12.16 · 6 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Paybond Kit for TypeScript: agent spend governance for paid tool calls with spend authorization, evidence receipts, refunds, disputes, hosted Gateway sessions, and settlement.

676Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.12.16 (the latest release), from the OSV.dev database.

sentinel-warden

v0.1.0 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Supply-chain firewall for AI agent skills, MCP servers, and rules files. Scans for prompt injection, data exfiltration, and tool poisoning before you install — and emits an agent-BOM + compliance evidence as a byproduct.

8Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.0 (the latest release), from the OSV.dev database.

@amityco/social-plus-vise

v1.18.0 · 18 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Skill-guided deterministic CLI for social.plus SDK integration assistance.

205Downloads across all versions in the last 7 days, from the official npm downloads API.SEE LICENSE IN LICENSELicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.18.0 (the latest release), from the OSV.dev database.

@aws-sdk/client-auditmanager

v3.1106.0 · 15 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

AWS SDK for JavaScript Auditmanager Client for Node.js, Browser and React Native

28.0KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.1106.0 (the latest release), from the OSV.dev database.

@pulumi/compliance-policies-unit-test-helpers

v0.1.6 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

11.6KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.6 (the latest release), from the OSV.dev database.

@regixo/catalog-read

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Regixo's read layer for AI agents — one read path over the local catalog and the free compliance DRAFT, consumed by both the /api/v1 read API and the read-only `regixo mcp` server so they always agree. Read-only by construction (no setter); zero metadata

376Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.

domino

v2.1.7 · 4 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Server-side DOM implementation based on Mozilla's dom.js

1.5MDownloads across all versions in the last 7 days, from the official npm downloads API.BSD-2-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.1.7 (the latest release), from the OSV.dev database.