@box/box-ai-content-answers
<!-- START doctoc generated TOC please keep comment here to allow auto update --> <!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/chunks/markdown.js | AI (source-diff): Minified bundler output inlining highlight.js/remarkable; consistent with declared deps and Box's build pipeline. | ai |
Versions (showing 100 of 333)
| Version | Deps | Published |
|---|---|---|
| 1.47.13 | 2 / 11 | |
| 1.47.12 | 2 / 11 | |
| 1.47.11 | 2 / 11 | |
| 1.47.10 | 2 / 11 | |
| 1.47.9 | 2 / 11 | |
| 1.47.8 | 2 / 11 | |
| 1.47.7 | 2 / 11 | |
| 1.47.6 | 2 / 11 | |
| 1.47.5 | 2 / 11 | |
| 1.47.4 | 2 / 11 | |
| 1.47.3 | 2 / 11 | |
| 1.47.2 | 2 / 11 | |
| 1.47.1 | 2 / 11 | |
| 1.47.0 | 2 / 11 | |
| 1.46.24 | 2 / 11 | |
| 1.46.23 | 2 / 11 | |
| 1.46.22 | 2 / 11 | |
| 1.46.21 | 2 / 11 | |
| 1.46.20 | 2 / 11 | |
| 1.46.19 | 2 / 11 | |
| 1.46.18 | 2 / 11 | |
| 1.46.17 | 2 / 11 | |
| 1.46.16 | 2 / 11 | |
| 1.46.15 | 2 / 11 | |
| 1.46.14 | 2 / 11 | |
| 1.46.13 | 2 / 11 | |
| 1.46.12 | 2 / 11 | |
| 1.46.11 | 2 / 11 | |
| 1.46.7 | 2 / 11 | |
| 1.46.6 | 2 / 11 | |
| 1.46.5 | 2 / 11 | |
| 1.46.4 | 2 / 11 | |
| 1.46.3 | 2 / 11 | |
| 1.46.2 | 2 / 11 | |
| 1.46.1 | 2 / 11 | |
| 1.46.0 | 2 / 11 | |
| 1.45.3 | 2 / 11 | |
| 1.44.30 | 2 / 11 | |
| 1.44.29 | 2 / 11 | |
| 1.44.28 | 2 / 11 | |
| 1.44.27 | 2 / 11 | |
| 1.44.26 | 2 / 11 | |
| 1.44.25 | 2 / 11 | |
| 1.44.24 | 2 / 11 | |
| 1.44.23 | 2 / 11 | |
| 1.44.22 | 2 / 11 | |
| 1.44.21 | 2 / 11 | |
| 1.44.20 | 2 / 11 | |
| 1.44.19 | 2 / 11 | |
| 1.44.18 | 2 / 11 | |
| 1.44.17 | 2 / 11 | |
| 1.44.16 | 2 / 11 | |
| 1.44.15 | 2 / 11 | |
| 1.44.14 | 2 / 11 | |
| 1.44.13 | 2 / 11 | |
| 1.44.12 | 2 / 11 | |
| 1.44.11 | 2 / 11 | |
| 1.44.10 | 2 / 11 | |
| 1.44.9 | 2 / 11 | |
| 1.44.8 | 2 / 11 | |
| 1.44.7 | 2 / 11 | |
| 1.44.6 | 2 / 11 | |
| 1.44.5 | 2 / 11 | |
| 1.44.4 | 2 / 11 | |
| 1.44.3 | 2 / 11 | |
| 1.44.2 | 2 / 11 | |
| 1.44.1 | 2 / 11 | |
| 1.44.0 | 2 / 11 | |
| 1.43.57 | 2 / 11 | |
| 1.43.56 | 2 / 11 | |
| 1.43.55 | 2 / 11 | |
| 1.43.54 | 2 / 11 | |
| 1.43.53 | 2 / 11 | |
| 1.43.52 | 2 / 11 | |
| 1.43.51 | 2 / 11 | |
| 1.43.50 | 2 / 11 | |
| 1.43.49 | 2 / 11 | |
| 1.43.48 | 2 / 11 | |
| 1.43.47 | 2 / 11 | |
| 1.43.46 | 2 / 11 | |
| 1.43.45 | 2 / 11 | |
| 1.43.44 | 2 / 11 | |
| 1.43.43 | 2 / 11 | |
| 1.43.42 | 2 / 11 | |
| 1.43.41 | 2 / 11 | |
| 1.43.40 | 2 / 11 | |
| 1.43.39 | 2 / 11 | |
| 1.43.38 | 2 / 11 | |
| 1.43.37 | 2 / 11 | |
| 1.43.36 | 2 / 11 | |
| 1.43.35 | 2 / 11 | |
| 1.43.34 | 2 / 11 | |
| 1.43.33 | 2 / 11 | |
| 1.43.32 | 2 / 11 | |
| 1.43.31 | 2 / 11 | |
| 1.43.30 | 2 / 11 | |
| 1.43.29 | 2 / 11 | |
| 1.43.28 | 2 / 11 | |
| 1.43.27 | 2 / 11 | |
| 1.43.26 | 2 / 11 |
v1.47.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.24
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.23
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.22
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.21
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.20
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.19
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.16
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.15
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.14
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.45.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.30
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.29
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.28
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.27
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.26
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.25
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.24
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.23
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.22
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.21
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.20
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.19
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.16
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.15
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.14
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.43.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.43.56
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.