docs(library-decisions): backfill socketRisk in 2026-05-14 traces
The Socket supply-chain filter (ADR-023) was added after the initial library-trace backfill, leaving the 36 traces dated 2026-05-14 without the socketRisk filter-results field the trace schema now expects. Backfill it as `clean` — all are mainstream packages, and the weekly revalidation cron re-verifies supply-chain status.
This commit is contained in:
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/api-logs license
|
||||
- npm view @opentelemetry/api-logs version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/api license
|
||||
- npm view @opentelemetry/api version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/context-async-hooks license
|
||||
- npm view @opentelemetry/context-async-hooks version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/instrumentation-http license
|
||||
- npm view @opentelemetry/instrumentation-http version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/instrumentation-pg license
|
||||
- npm view @opentelemetry/instrumentation-pg version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/instrumentation-undici license
|
||||
- npm view @opentelemetry/instrumentation-undici version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/instrumentation license
|
||||
- npm view @opentelemetry/instrumentation version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/resources license
|
||||
- npm view @opentelemetry/resources version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/sdk-logs license
|
||||
- npm view @opentelemetry/sdk-logs version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/sdk-metrics license
|
||||
- npm view @opentelemetry/sdk-metrics version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/sdk-node license
|
||||
- npm view @opentelemetry/sdk-node version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/sdk-trace-base license
|
||||
- npm view @opentelemetry/sdk-trace-base version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @opentelemetry/semantic-conventions license
|
||||
- npm view @opentelemetry/semantic-conventions version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: self-hostable
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @payloadcms/db-postgres license
|
||||
- npm view @payloadcms/db-postgres version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @payloadcms/richtext-lexical license
|
||||
- npm view @payloadcms/richtext-lexical version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: ok
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @sentry/nextjs license
|
||||
- npm view @sentry/nextjs version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: ok
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @sentry/node license
|
||||
- npm view @sentry/node version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: ok
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @sentry/opentelemetry license
|
||||
- npm view @sentry/opentelemetry version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: ok
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @sentry/react license
|
||||
- npm view @sentry/react version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @tanstack/react-query license
|
||||
- npm view @tanstack/react-query version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @testing-library/jest-dom license
|
||||
- npm view @testing-library/jest-dom version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @testing-library/react license
|
||||
- npm view @testing-library/react version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @testing-library/user-event license
|
||||
- npm view @testing-library/user-event version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @trpc/client license
|
||||
- npm view @trpc/client version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view @trpc/server license
|
||||
- npm view @trpc/server version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- pnpm audit --audit-level=moderate
|
||||
- npm view clsx license
|
||||
|
||||
@@ -18,6 +18,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view globals license
|
||||
- npm view globals version
|
||||
|
||||
@@ -18,6 +18,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view inversify license
|
||||
- npm view inversify version
|
||||
|
||||
@@ -18,6 +18,7 @@ filter-results:
|
||||
eu-residency: self-hostable
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view payload license
|
||||
- npm view payload version
|
||||
|
||||
@@ -18,6 +18,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view react-dom license
|
||||
- npm view react-dom version
|
||||
|
||||
@@ -18,6 +18,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view react license
|
||||
- npm view react version
|
||||
|
||||
@@ -18,6 +18,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view reflect-metadata license
|
||||
- npm view reflect-metadata version
|
||||
|
||||
@@ -18,6 +18,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view superjson license
|
||||
- npm view superjson version
|
||||
|
||||
@@ -15,6 +15,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- pnpm audit --audit-level=moderate
|
||||
- npm view tailwind-merge license
|
||||
|
||||
@@ -18,6 +18,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view vitest license
|
||||
- npm view vitest version
|
||||
|
||||
@@ -18,6 +18,7 @@ filter-results:
|
||||
eu-residency: n/a
|
||||
cve-scan: clean
|
||||
named-consumer: pass
|
||||
socketRisk: clean
|
||||
verification-commands:
|
||||
- npm view zod license
|
||||
- npm view zod version
|
||||
|
||||
Reference in New Issue
Block a user