@digitransit-component/digitransit-component-autosuggest
digitransit-component autosuggest module
17
Versions
(AGPL-3.0 OR EUPL-1.2)
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
digitransit
Keywords
digitransit-componentAutosuggest
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:new-function-constructor | AI (semgrep): Fires in minified webpack bundle output; standard pattern in React component library builds, not a security concern for this package. | ai | |
| phantom-deps | phantom-dep:@hsl-fi/hooks | AI (phantom-deps): First-party HSL scoped dep bundled into webpack output; phantom-dep heuristic is a false positive here. | ai | |
| phantom-deps | phantom-dep:@digitransit-search-util/digitransit-search-util-get-label | AI (phantom-deps): First-party digitransit scoped dep bundled into webpack output; phantom-dep heuristic is a false positive. | ai | |
| phantom-deps | phantom-dep:@digitransit-search-util/digitransit-search-util-uniq-by-label | AI (phantom-deps): First-party digitransit scoped dep bundled into webpack output; phantom-dep heuristic is a false positive. | ai | |
| phantom-deps | phantom-dep:@digitransit-search-util/digitransit-search-util-execute-search-immidiate | AI (phantom-deps): First-party digitransit scoped dep bundled into webpack output; phantom-dep heuristic is a false positive. | ai |