← Home

@digabi/exam-engine-rendering

npm Repository Homepage
51
Versions
EUPL-1.1
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

eetu.ikonenadetabsvexterieerojantunenismomehdilnaalisvarkuar-rkvillejokelaemsknocklinusw-rchrysalis-brobin.lundellpejuamjan-aleksijerenurminenheikki.mantereogresoundsamuliheljomtreinikmplattu-mebntobiassonaateekoohennaakskos

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern new-deps-added AI (publish-pattern): Routine dep swap (child-process-promise → promisify-child-process); established publisher with long clean history. ai
maintainer-change maintainer-removed AI (maintainer-change): CI/CD-published package with SLSA provenance; maintainer churn in an org context is routine, not a takeover indicator. ai
dependencies unvetted-dep:react-router5 AI (dependencies): react-router5 is a legitimate routing library; stable dependency across this package's history. ai
bogus-package bogus-package AI (bogus-package): Long-lived scoped package in an active monorepo; missing metadata is a style choice, not a spam indicator. ai
maintainer-change maintainer-added AI (maintainer-change): Package has SLSA provenance; maintainer addition appears to be a legitimate org change for this long-established package. ai
phantom-deps phantom-dep:less AI (phantom-deps): Build tool dep used via less-loader config; not directly imported by design. ai
phantom-deps phantom-dep:@fortawesome/fontawesome-svg-core AI (phantom-deps): Loaded via config/convention in rendering pipeline, not direct import. ai
phantom-deps phantom-dep:dexie AI (phantom-deps): Likely loaded at runtime via framework convention, not direct import. ai
phantom-deps phantom-dep:postcss AI (phantom-deps): Used via postcss-loader config; indirect usage is expected. ai
phantom-deps phantom-dep:@babel/core AI (phantom-deps): Framework-scoped; loaded by babel-loader convention. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Framework-scoped; loaded by babel transform convention. ai

Versions (showing 51 of 63)

View all versions
Version Deps Published
23.27.0 33 / 0
23.26.0 33 / 0
23.24.3 33 / 0
23.24.2 33 / 0
23.24.1 33 / 0
23.24.0 33 / 0
23.23.0 33 / 0
23.22.4 33 / 0
23.22.3 33 / 0
23.22.2 33 / 0
23.22.1 33 / 0
23.22.0 33 / 0
23.21.0 33 / 0
23.20.6 33 / 0
23.20.1 33 / 0
23.19.2 33 / 0
23.19.1 33 / 0
23.19.0 33 / 0
23.16.0 33 / 0
23.14.3 33 / 0
23.14.2 33 / 0
23.14.1 33 / 0
23.13.4 33 / 0
23.13.3 33 / 0
23.13.2 33 / 0
23.13.1 33 / 0
23.13.0 33 / 0
23.9.2 33 / 0
23.9.1 33 / 0
23.9.0 33 / 0
23.8.4 33 / 0
23.8.3 33 / 0
23.8.2 33 / 0
23.8.1 33 / 0
23.7.2 33 / 0
23.7.1 33 / 0
23.7.0 33 / 0
23.6.3 33 / 0
23.6.2 33 / 0
23.6.1 33 / 0
23.6.0 33 / 0
23.5.4 33 / 0
23.5.3 33 / 0
23.5.2 33 / 0
23.5.1 33 / 0
23.5.0 33 / 0
23.4.7 33 / 0
23.4.6 33 / 0
23.4.5 33 / 0
23.4.3 33 / 0
23.4.2 33 / 0

v23.27.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v23.26.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v23.13.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.9.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.9.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.9.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.8.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.8.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.8.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.8.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.7.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.7.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.7.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.6.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.6.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.6.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.6.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.5.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.5.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.5.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.5.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.4.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.4.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.4.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.4.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v23.4.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.