@alwaysmeticulous/replay-debugger-ui
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:out/_next/static/chunks/pages/index-5738aab8fca9aa14.js | AI (source-diff): Next.js page chunk; expected minified build artifact for this UI package. | ai | |
| source-diff | obfuscated-file:out/_next/static/chunks/pages/index-b67a721d1bf3efe3.js | AI (source-diff): Next.js page chunk; minified build artifact, not obfuscation. | ai | |
| provenance | publisher-changed | AI (provenance): Migration to GitHub Actions CI publishing with SLSA provenance is a security improvement, not a risk. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): 162 versions in registry; dormancy flag is a false positive for this active package. | ai | |
| source-diff | obfuscated-file:out/_next/static/chunks/pages/index-f56ced70984c1d84.js | AI (source-diff): Standard Next.js minified page chunk; expected for this package type. | ai | |
| source-diff | obfuscated-file:out/_next/static/chunks/726-57c46830f0d666bc.js | AI (source-diff): Standard Next.js minified webpack chunk; expected output for a UI package shipping pre-built Next.js assets. | ai | |
| source-diff | obfuscated-file:out/_next/static/chunks/main-1c2279047be86cb1.js | AI (source-diff): Standard Next.js minified main chunk; expected for this package type. | ai | |
| source-diff | obfuscated-file:out/_next/static/chunks/726-78489d9894253da8.js | AI (source-diff): Standard Next.js webpack chunk with Heroicons SVG components; expected output for this UI package. | ai | |
| source-diff | obfuscated-file:out/_next/static/chunks/main-139598e0fdd3d889.js | AI (source-diff): Standard Next.js minified main chunk; expected output for this UI package. | ai | |
| source-diff | obfuscated-file:out/_next/static/chunks/framework-91987f609a502755.js | AI (source-diff): Standard Next.js/React minified framework bundle; expected output for this UI package. | ai | |
| phantom-deps | phantom-dep:luxon | AI (phantom-deps): luxon is declared as a runtime dependency in package.json; phantom-dep heuristic is a false positive here. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Fires in Turbopack/Next.js generated bundle chunks; standard framework output, not malicious obfuscation. | ai |
Versions (showing 40 of 140)
| Version | Deps | Published |
|---|---|---|
| 2.183.0 | 2 / 12 | |
| 2.181.1 | 2 / 12 | |
| 2.181.0 | 2 / 12 | |
| 2.180.0 | 2 / 12 | |
| 2.178.0 | 2 / 12 | |
| 2.177.0 | 2 / 12 | |
| 2.176.0 | 2 / 12 | |
| 2.175.0 | 2 / 12 | |
| 2.174.0 | 2 / 12 | |
| 2.173.0 | 2 / 12 | |
| 2.172.0 | 2 / 12 | |
| 2.171.0 | 2 / 12 | |
| 2.170.0 | 2 / 12 | |
| 2.169.0 | 2 / 12 | |
| 2.168.0 | 2 / 12 | |
| 2.167.0 | 2 / 12 | |
| 2.166.0 | 2 / 12 | |
| 2.165.0 | 2 / 12 | |
| 2.164.0 | 2 / 12 | |
| 2.163.0 | 2 / 12 | |
| 2.162.0 | 2 / 12 | |
| 2.161.0 | 2 / 12 | |
| 2.160.0 | 2 / 12 | |
| 2.159.0 | 2 / 12 | |
| 2.158.1 | 2 / 12 | |
| 2.157.0 | 2 / 12 | |
| 2.156.0 | 2 / 12 | |
| 2.155.0 | 2 / 12 | |
| 2.154.1 | 2 / 12 | |
| 2.153.0 | 2 / 12 | |
| 2.152.0 | 2 / 12 | |
| 2.150.0 | 2 / 12 | |
| 2.149.0 | 2 / 12 | |
| 2.148.0 | 2 / 12 | |
| 2.146.1 | 2 / 12 | |
| 2.145.0 | 2 / 12 | |
| 2.144.0 | 2 / 12 | |
| 2.143.0 | 2 / 12 | |
| 2.132.0 | 2 / 11 | |
| 2.128.0 | 2 / 11 |
v2.183.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.181.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.181.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.180.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.178.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.177.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.176.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.175.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.174.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.173.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.172.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.171.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.170.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.169.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.168.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.167.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.166.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.165.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.164.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.163.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.162.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.161.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.160.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.159.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.158.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.157.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.156.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.155.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.154.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.153.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.152.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.150.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.149.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.148.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.146.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.145.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.144.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.143.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.132.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.128.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.