lockfiles 2latest commit 5789d2081dbbcompromised versions debug@4.4.2resolved while live 2
Deprioritise. The package is in the install tree but no scanned file imports it.
LVQT-ss/cakestory-api@5789d2081dbbresolved while livedirect · 5789d20 · 2025-09-13 04:37:42Z
reachability ·files were scanned and none import the package; it only sits in the install tree · 83 files scanned · 0 imports · 0 symbol uses
LVQT-ss/cakestory-api@458e59eb9f7bresolved while livedirect · 458e59e · 2025-09-08 14:05:12Z
reachability ·files were scanned and none import the package; it only sits in the install tree · 83 files scanned · 0 imports · 0 symbol uses
reachability83 first-party files scanned · 0 imports · 0 symbol uses
no scanned file imports the package
resolved while live2 lockfiles
- 458e59eb9f7bcommitted 2025-09-08 14:05:12Zdebug@4.4.2in_window + pinned_removedwindow 2025-09-08 13:12:39Z → 2025-09-08 14:26:51Z (upper bound)
- 5789d2081dbbcommitted 2025-09-13 04:37:42Zdebug@4.4.2pinned_removedwindow 2025-09-08 13:12:39Z → 2025-09-08 14:26:51Z (upper bound)
notes ·Membership is exact (RESOLVED = the lockfile's flattened install tree). Explanation paths are the 3 shortest per lockfile, not all of them.
Import-level scan of first-party JS/TS at the exposed commit (regex, not a parser); symbol-level (L2) needs tree-sitter and is only present in the fixture.
2 lockfiles · 6 proving paths