@everymatrix/cashier-page
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:components/CashierPage-Db1WM6lI.cjs | AI (source-diff): Bundled Svelte component output, not obfuscation; recurring build artifact for this package. | ai | |
| source-diff | obfuscated-file:components/CashierPage-Bo-pdE3e.cjs | AI (source-diff): Bundled Svelte/Stencil component output, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierCarousel-BekweMPA.cjs | AI (source-diff): Bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierMethodDetails-ClsKYPK5.cjs | AI (source-diff): Bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierPage-CdNfJQft.cjs | AI (source-diff): Bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierPage-BL7F7z0O.cjs | AI (source-diff): Bundled build output (svelte/webpack banner), not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-Bi6R1tHR.cjs | AI (source-diff): Bundled Svelte/Stencil component output, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-DDQmcXZG.cjs | AI (source-diff): Bundled Svelte/Rollup output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierMethodDetails-Dbnc7shQ.cjs | AI (source-diff): Bundled Svelte/Rollup output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierCarousel-Uqj8lOn9.cjs | AI (source-diff): Bundled Svelte/Stencil build chunk, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierPage-BFDNXgBN.cjs | AI (source-diff): Bundled Svelte build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierCarousel-B8Fa01wg.cjs | AI (source-diff): Bundled Svelte build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierMethodDetails-C35GONRH.cjs | AI (source-diff): Standard bundler minified output, not obfuscation; consistent with package's build pipeline. | ai | |
| source-diff | obfuscated-file:components/CashierPage-CnjHLKni.cjs | AI (source-diff): Bundled minified component chunk, false positive for obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierPage-D9Qaorp_.cjs | AI (source-diff): Minified bundler output (Vite/Rollup chunk), not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierCarousel-BM7TbAtM.cjs | AI (source-diff): Minified Svelte/bundler build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierPage-CyVP1RTq.js | AI (source-diff): Vite/Rollup bundled webcomponent output, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierPage-Yklnwu-d.js | AI (source-diff): Vite/Rollup bundled webcomponent output, not obfuscation. | ai | |
| phantom-deps | phantom-dep:@everymatrix/cashier-modal | AI (phantom-deps): Same-org dependencies; likely re-exported or used transitively by subcomponents. | ai | |
| phantom-deps | phantom-dep:@everymatrix/cashier-header | AI (phantom-deps): Same-org dependencies; likely re-exported or used transitively by subcomponents. | ai | |
| phantom-deps | phantom-dep:@everymatrix/cashier-methods-list | AI (phantom-deps): Same-org dependencies; likely re-exported or used transitively by subcomponents. | ai | |
| phantom-deps | phantom-dep:@everymatrix/cashier-confirm-modal | AI (phantom-deps): Same-org dependencies; likely re-exported or used transitively by subcomponents. | ai | |
| phantom-deps | phantom-dep:@everymatrix/cashier-method-details | AI (phantom-deps): Same-org dependencies; likely re-exported or used transitively by subcomponents. | ai | |
| phantom-deps | phantom-dep:@everymatrix/cashier-iframe-redirect | AI (phantom-deps): Same-org dependencies; likely re-exported or used transitively by subcomponents. | ai | |
| phantom-deps | phantom-dep:@everymatrix/cashier-error | AI (phantom-deps): Same-org dependencies; likely re-exported or used transitively by subcomponents. | ai | |
| phantom-deps | phantom-dep:sirv-cli | AI (phantom-deps): Used via 'start' script (sirv public); build tool dep. | ai | |
| phantom-deps | phantom-dep:svelte | AI (phantom-deps): Referenced in svelte config field and build tooling. | ai | |
| phantom-deps | phantom-dep:cross-env | AI (phantom-deps): Used directly in build/dev scripts. | ai | |
| source-diff | obfuscated-file:components/CashierPage-BLm3V5c-.cjs | AI (source-diff): Bundled/minified build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierMethodDetails-Ci-pWa99.cjs | AI (source-diff): Bundled/minified build output, not obfuscation; matches package's known bundler output pattern. | ai | |
| source-diff | obfuscated-file:components/CashierCarousel-DMrMmClP.cjs | AI (source-diff): Bundled Svelte/Stencil component output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierPage-CfJ553ny.cjs | AI (source-diff): Bundled Svelte/JS build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-DfpdiheS.cjs | AI (source-diff): Bundled Stencil/Svelte build output, not obfuscation. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Publisher confirmed as known prior maintainer per provenance INFO finding. | ai | |
| source-diff | obfuscated-file:components/CashierPage-CAjB96zt.cjs | AI (source-diff): Bundled Svelte build output, not obfuscation; consistent with package's build pipeline. | ai | |
| source-diff | obfuscated-file:components/CashierPage-CRrW53ta.cjs | AI (source-diff): Bundled Svelte/rollup build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierMethodDetails-BkiZecmE.cjs | AI (source-diff): Bundled Stencil/Svelte build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierPage-D7cZXI1W.cjs | AI (source-diff): Bundled Svelte/Stencil build output, not obfuscation; standard for this widget package. | ai | |
| source-diff | obfuscated-file:components/CashierCarousel-1mMP8tyv.cjs | AI (source-diff): Bundled Svelte/Stencil build output, not obfuscation. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Normal maintainer roster churn for long-lived internal package. | ai | |
| source-diff | obfuscated-file:components/CashierCarousel-DXPbv83E.cjs | AI (source-diff): Minified bundler output, not obfuscation; no malicious behavior present. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Long-standing internal widget package pattern for this publisher. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Metadata sparsity typical of this enterprise component package, not spam. | ai | |
| source-diff | obfuscated-file:components/CashierPage-ryHjNYo4.cjs | AI (source-diff): Minified Svelte bundle output, not true obfuscation; consistent with package's build process. | ai | |
| source-diff | obfuscated-file:components/CashierCarousel-BzlDee2_.cjs | AI (source-diff): Minified Svelte component bundle; readable i18n strings and CSS confirm legitimate UI code. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Hash-named build artifacts from Vite/Rollup; new files per release is expected for this package. | ai | |
| source-diff | obfuscated-file:components/CashierModal-BJCRBXtp.cjs | AI (source-diff): Minified Svelte component bundle; readable CSS animations confirm legitimate UI code. | ai | |
| source-diff | obfuscated-file:components/CashierMethodsList-B9M85ykR.cjs | AI (source-diff): Minified Svelte component bundle; readable i18n strings confirm legitimate UI code. | ai | |
| source-diff | obfuscated-file:components/CashierIframeRedirect-G0gXNho3.cjs | AI (source-diff): Minified Svelte component bundle; readable CSS and i18n strings confirm legitimate UI code. | ai | |
| source-diff | obfuscated-file:components/CashierHeader-DCoLHm99.cjs | AI (source-diff): Minified Svelte component bundle; readable CSS and i18n strings confirm legitimate UI code. | ai | |
| source-diff | obfuscated-file:components/CashierError-BjCp3qo9.cjs | AI (source-diff): Minified Svelte component bundle with readable error message strings. | ai | |
| source-diff | obfuscated-file:components/CashierPage-DFc7t9CJ.cjs | AI (source-diff): Standard Vite/Rollup minified Svelte bundle; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:components/CashierMethodDetails-DEXZTmb3.cjs | AI (source-diff): Minified Svelte component bundle; no obfuscation indicators beyond line length. | ai |
Versions (showing 100 of 397)
| Version | Deps | Published |
|---|---|---|
| 1.72.0 | 0 / 0 | |
| 1.71.1 | 0 / 0 | |
| 1.71.0 | 0 / 0 | |
| 1.70.1 | 0 / 0 | |
| 1.70.0 | 0 / 0 | |
| 1.69.104 | 0 / 0 | |
| 1.69.94 | 0 / 0 | |
| 1.69.75 | 0 / 0 | |
| 1.69.74 | 0 / 0 | |
| 1.69.73 | 0 / 0 | |
| 1.69.72 | 0 / 0 | |
| 1.69.71 | 0 / 0 | |
| 1.69.70 | 0 / 0 | |
| 1.69.69 | 0 / 0 | |
| 1.69.4 | 0 / 0 | |
| 1.69.3 | 0 / 0 | |
| 1.69.2 | 0 / 0 | |
| 1.69.0 | 0 / 0 | |
| 1.68.0 | 0 / 0 | |
| 1.67.3 | 0 / 0 | |
| 1.67.0 | 0 / 0 | |
| 1.66.2 | 0 / 0 | |
| 1.66.1 | 0 / 0 | |
| 1.66.0 | 0 / 0 | |
| 1.65.3 | 0 / 0 | |
| 1.65.2 | 0 / 0 | |
| 1.65.1 | 0 / 0 | |
| 1.65.0 | 0 / 0 | |
| 1.64.8 | 0 / 0 | |
| 1.64.7 | 0 / 0 | |
| 1.64.6 | 0 / 0 | |
| 1.64.5 | 0 / 0 | |
| 1.64.4 | 0 / 0 | |
| 1.64.2 | 0 / 0 | |
| 1.64.1 | 0 / 0 | |
| 1.64.0 | 0 / 0 | |
| 1.63.3 | 0 / 0 | |
| 1.63.2 | 0 / 0 | |
| 1.63.1 | 0 / 0 | |
| 1.63.0 | 0 / 0 | |
| 1.62.4 | 0 / 0 | |
| 1.62.3 | 0 / 0 | |
| 1.62.2 | 0 / 0 | |
| 1.62.1 | 0 / 0 | |
| 1.62.0 | 0 / 0 | |
| 1.61.1 | 0 / 0 | |
| 1.61.0 | 0 / 0 | |
| 1.60.2 | 0 / 0 | |
| 1.60.1 | 0 / 0 | |
| 1.60.0 | 0 / 0 | |
| 1.59.3 | 0 / 0 | |
| 1.59.2 | 0 / 0 | |
| 1.59.1 | 0 / 0 | |
| 1.59.0 | 0 / 0 | |
| 1.58.1 | 0 / 0 | |
| 1.58.0 | 0 / 0 | |
| 1.57.0 | 0 / 0 | |
| 1.56.3 | 0 / 0 | |
| 1.56.2 | 0 / 0 | |
| 1.56.0 | 0 / 0 | |
| 1.55.0 | 0 / 0 | |
| 1.54.12 | 0 / 0 | |
| 1.54.11 | 0 / 0 | |
| 1.54.10 | 0 / 0 | |
| 1.54.9 | 0 / 0 | |
| 1.54.8 | 0 / 0 | |
| 1.54.6 | 0 / 0 | |
| 1.54.4 | 0 / 0 | |
| 1.54.2 | 0 / 0 | |
| 1.54.0 | 7 / 0 | |
| 1.53.12 | 0 / 0 | |
| 1.53.11 | 0 / 0 | |
| 1.53.10 | 0 / 0 | |
| 1.53.0 | 7 / 0 | |
| 1.52.6 | 7 / 0 | |
| 1.52.5 | 7 / 0 | |
| 1.52.4 | 7 / 0 | |
| 1.52.3 | 7 / 0 | |
| 1.52.2 | 7 / 0 | |
| 1.52.1 | 7 / 0 | |
| 1.52.0 | 7 / 0 | |
| 1.51.0 | 7 / 0 | |
| 1.50.1 | 7 / 0 | |
| 1.50.0 | 7 / 0 | |
| 1.49.2 | 7 / 0 | |
| 1.49.1 | 7 / 0 | |
| 1.49.0 | 7 / 0 | |
| 1.48.2 | 7 / 0 | |
| 1.48.1 | 7 / 0 | |
| 1.48.0 | 7 / 0 | |
| 1.47.3 | 7 / 0 | |
| 1.47.2 | 7 / 0 | |
| 1.47.1 | 7 / 0 | |
| 1.47.0 | 7 / 0 | |
| 1.46.1 | 7 / 0 | |
| 1.46.0 | 7 / 0 | |
| 1.45.14 | 7 / 0 | |
| 1.45.13 | 7 / 0 | |
| 1.45.11 | 7 / 0 | |
| 1.45.10 | 7 / 0 |
v1.72.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.71.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.71.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.70.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.70.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.104
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.94
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.75
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.74
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.73
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.72
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.71
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.70
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.69
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.69.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.67.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.67.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.65.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.65.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.65.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.63.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.63.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.63.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.63.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.61.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.61.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.60.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.60.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.60.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.59.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.59.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.59.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.59.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.58.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.58.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.57.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.56.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.56.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.56.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.55.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.54.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.54.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.54.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.54.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.54.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.54.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.54.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.54.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.54.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.53.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.53.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.53.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.53.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.52.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.52.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.52.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.52.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.52.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.52.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.52.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.51.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.50.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.50.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.49.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.49.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.49.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.48.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.48.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.48.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.47.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.47.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.47.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.47.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.46.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.46.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.45.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.45.13
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.45.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.45.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.