← Home

@atproto/oauth-provider-frontend

20
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

dholmspfrazeedevinivyestrattonbaileymatthieu-bluesky

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/account-page-B5YRLmZI.js AI (source-diff): Vite-built frontend bundle; minified output is expected for this frontend-only package. ai
source-diff obfuscated-file:dist/account-page-aY9kgNHX.js AI (source-diff): Standard Vite/React minified bundle output for this frontend package; not obfuscation. ai
source-diff obfuscated-file:dist/messages-V0gb4pg7.js AI (source-diff): Compiled i18n message bundle (lingui); plaintext JSON-in-JS, not obfuscation. ai
source-diff obfuscated-file:dist/account-page-BW5F_5Vk.js AI (source-diff): Vite-minified frontend bundle with accompanying source map; expected artifact for this frontend package. ai

Versions (showing 20 of 20)

Version Deps Published
0.2.9 0 / 29
0.2.8 0 / 30
0.2.7 0 / 30
0.2.6 0 / 30
0.2.5 0 / 30
0.2.4 0 / 30
0.2.3 0 / 30
0.2.2 0 / 30
0.2.1 0 / 30
0.2.0 0 / 30
0.1.12 0 / 30
0.1.11 0 / 30
0.1.10 0 / 30
0.1.9 0 / 30
0.1.8 0 / 30
0.1.7 0 / 30
0.1.6 0 / 30
0.1.5 0 / 30
0.1.4 0 / 30
0.1.0 0 / 30

v0.1.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.