Docs

FC-UIP-PKG-003: Required package

Required package or package version is missing from project.json.

highgovernanceuipathUiPath ST-USG-027

What it detects

Required package or package version is missing from project.json. Flowcerta surfaces this finding from the active validation pipeline for supported file types and platforms.

Why it matters

This finding matters because it weakens workflow reliability, security posture, or audit readiness.

Example violation

A UiPath project is missing a required activity package or the installed version does not match the approved baseline.

Fix guidance

UiPath

  • Install the required dependency version or update project.json so the project uses the approved package baseline.
  • Use platform-native assets, credentials, bounded retries, and Log Message checkpoints instead of hardcoded literals or silent failure paths.
  • Revalidate the workflow after the change and confirm the finding no longer appears.

Verification steps

  1. Run validation again and confirm the rule no longer appears in the finding list.
  2. Review the changed workflow artifact directly to verify the risky pattern is gone.
  3. Capture the new validation result as evidence for the relevant owner or compliance review.

Compliance references

Related rules

FC-UIP-AH-001FC-UIP-PKG-002FC-UIP-TAG-001

This page is generated from the canonical Flowcerta rule registry used by validation scoring.

Browse all rule playbooks