@everymatrix/casino-challenge-details
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-3d4b40fc.js | AI (source-diff): Minified Stencil bundle; non-minified esm twin confirms benign CSS-fetch logic, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-f50b70d2.js | AI (source-diff): CJS build output of same benign module. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-3d4b40fc.js | AI (source-diff): Same bundle, unminified — confirms benign client-styling code. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-167be1bf.js | AI (source-diff): Bundled Stencil/Rollup output, not obfuscation; readable source with benign CSS-fetch helper. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-ac6a04ba.js | AI (source-diff): ESM bundle output mirrors CJS version; standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-ac6a04ba.js | AI (source-diff): Minified build artifact of same benign widget code, no malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-adeefa38.js | AI (source-diff): Minified bundler output, not obfuscation; no malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-adeefa38.js | AI (source-diff): Minified bundler output, not obfuscation; no malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-4f38bd81.js | AI (source-diff): Minified bundler output, not obfuscation; no malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-f380eb66.js | AI (source-diff): Minified bundler output, code is readable widget CSS-loading logic. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-f380eb66.js | AI (source-diff): Minified bundler output, same source as cjs/esm counterparts. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-a8d72fce.js | AI (source-diff): Bundled build output, not obfuscation; consistent with prior versions' dist files. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-7809cffd.js | AI (source-diff): Standard minified Stencil bundle output; consistent with package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-7809cffd.js | AI (source-diff): Standard minified Stencil ESM bundle output; consistent with package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-6b649e81.js | AI (source-diff): Standard minified Stencil bundle output; consistent with package's established build pattern across 286 versions. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Internal @everymatrix team transition; publisher has extensive approved track record. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-8f737e06.js | AI (source-diff): ESM build output matching CJS counterpart; standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-8f737e06.js | AI (source-diff): Stencil.js lazy-load bundle; minified but benign widget code. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-8c125023.js | AI (source-diff): Standard Stencil.js CJS build output with readable source; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-1ecbe310.js | AI (source-diff): Standard Stencil.js ESM build artifact; unminified variant confirms legitimate widget code. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-1ecbe310.js | AI (source-diff): Standard Stencil.js minified build artifact; content is legitimate widget code. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-7f9a94a9.js | AI (source-diff): Standard Stencil.js CJS build artifact; content matches legitimate widget code. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-c096ce9a.js | AI (source-diff): Standard CJS build artifact matching ESM source; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-1496580b.js | AI (source-diff): Standard Stencil.js minified bundle; readable ESM counterpart confirms no obfuscation intent. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-1496580b.js | AI (source-diff): Readable ESM build artifact with JSDoc; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-a3f382a5.js | AI (source-diff): Standard Stencil.js minified build output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-a3f382a5.js | AI (source-diff): Standard Stencil.js minified build output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-0769d9f5.js | AI (source-diff): Standard Stencil.js minified build output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details_5.entry.js | AI (source-diff): Standard Stencil.js ESM minified build output; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-50bbf289.js | AI (source-diff): Minified Stencil bundle with readable i18n strings and widget logic; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-50bbf289.js | AI (source-diff): ESM Stencil bundle with full JSDoc comments visible; standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-e98d928b.js | AI (source-diff): CJS Stencil bundle with JSDoc comments; standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details_5.cjs.entry.js | AI (source-diff): Standard Stencil.js minified build output with inlined SVG data URIs; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details_5.entry.js | AI (source-diff): Standard Stencil.js minified build output; readable logic visible in samples. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-45d1afce.js | AI (source-diff): Standard Rollup/Stencil minified build output for this widget package; consistent across versions. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-a4a5791f.js | AI (source-diff): Standard Rollup/Stencil minified build output for this widget package; consistent across versions. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-a4a5791f.js | AI (source-diff): Standard Rollup/Stencil minified build output for this widget package; consistent across versions. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-da7717b1.js | AI (source-diff): Standard Rollup/Stencil minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-da7717b1.js | AI (source-diff): Standard Rollup/Stencil minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-433a9f36.js | AI (source-diff): Standard Rollup/Stencil minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-17a297f6.js | AI (source-diff): Standard Stencil.js minified bundle; no malicious payload in samples. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-b7aae25f.js | AI (source-diff): Standard Stencil.js minified bundle; no malicious payload in samples. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-17a297f6.js | AI (source-diff): Standard Stencil.js minified bundle; no malicious payload in samples. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-252d9b9c.js | AI (source-diff): Standard Stencil.js ESM minified build output; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-df1d40f7.js | AI (source-diff): Standard Stencil.js CJS minified build output; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-252d9b9c.js | AI (source-diff): Standard Stencil.js minified build output; consistent with all prior versions of this package. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-4e26ab78.js | AI (source-diff): Standard Stencil.js ESM minified bundle; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/index-30adf0cb.js | AI (source-diff): Stencil runtime bundle; minified but benign, consistent with this package family. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-63ae2c71.js | AI (source-diff): Standard Stencil.js CJS minified bundle; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-4e26ab78.js | AI (source-diff): Standard Stencil.js minified bundle; consistent with all prior @everymatrix widget releases. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-9620e5ea.js | AI (source-diff): Standard Rollup/Stencil minified bundle output; consistent with all prior @everymatrix widget releases. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-9620e5ea.js | AI (source-diff): Standard Rollup/Stencil minified bundle output; consistent with all prior @everymatrix widget releases. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-15b555ef.js | AI (source-diff): Standard Rollup/Stencil minified bundle output; consistent with all prior @everymatrix widget releases. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-00cd9c3e.js | AI (source-diff): Standard Stencil.js minified bundle for this widget family; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-7465690c.js | AI (source-diff): Standard Stencil.js CJS minified bundle; readable source confirms no malicious content. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-00cd9c3e.js | AI (source-diff): Standard Stencil.js ESM minified bundle; readable source confirms no malicious content. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-92840935.js | AI (source-diff): Standard minified Stencil build output; consistent pattern across all @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-92840935.js | AI (source-diff): Standard minified Stencil build output; consistent pattern across all @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-54898daf.js | AI (source-diff): Standard minified Stencil build output; consistent pattern across all @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-6d8eeca9.js | AI (source-diff): Standard Stencil.js minified build output; consistent with all prior @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-6d8eeca9.js | AI (source-diff): Standard Stencil.js minified build output; consistent with all prior @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-3c309aa3.js | AI (source-diff): Standard Stencil.js minified build output; consistent with all prior @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/index-662208df.js | AI (source-diff): Stencil runtime bundle; minified but recognizable Stencil.js internals, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-97bf6e45.js | AI (source-diff): Standard Stencil.js minified build artifact; consistent with established @everymatrix widget build pipeline. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/index-a44346bc.js | AI (source-diff): Stencil.js runtime bundle; minification is expected for this package family. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-cdbe115b.js | AI (source-diff): Standard Stencil.js minified build artifact; consistent with established @everymatrix widget build pipeline. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-97bf6e45.js | AI (source-diff): Standard Stencil.js minified build artifact; consistent with established @everymatrix widget build pipeline. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-26135f0c.js | AI (source-diff): Standard minified browser bundle; readable logic, no malicious patterns. Stable for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-26135f0c.js | AI (source-diff): Standard minified ESM build artifact; readable logic, no malicious patterns. Stable for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-16fc391a.js | AI (source-diff): Standard minified Stencil build artifact; readable logic, no malicious patterns. Stable for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped org widget package published via CI; sparse metadata is normal for this package family. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Consistent pattern across 228 versions of this org's widget packages. | ai | |
| provenance | no-provenance | AI (provenance): No provenance is common; no other risk signals present. | ai |
Versions (showing 100 of 318)
| Version | Deps | Published |
|---|---|---|
| 0.15.1 | 0 / 0 | |
| 0.15.0 | 0 / 0 | |
| 0.14.2 | 0 / 0 | |
| 0.14.1 | 0 / 0 | |
| 0.14.0 | 0 / 0 | |
| 0.13.37 | 0 / 0 | |
| 0.13.36 | 0 / 0 | |
| 0.13.35 | 0 / 0 | |
| 0.13.34 | 0 / 0 | |
| 0.13.33 | 0 / 0 | |
| 0.13.32 | 0 / 0 | |
| 0.13.31 | 0 / 0 | |
| 0.13.30 | 0 / 0 | |
| 0.13.29 | 0 / 0 | |
| 0.13.28 | 0 / 0 | |
| 0.13.27 | 0 / 0 | |
| 0.13.26 | 0 / 0 | |
| 0.13.25 | 0 / 0 | |
| 0.13.24 | 0 / 0 | |
| 0.13.23 | 0 / 0 | |
| 0.13.22 | 0 / 0 | |
| 0.13.21 | 0 / 0 | |
| 0.13.20 | 0 / 0 | |
| 0.13.19 | 0 / 0 | |
| 0.13.18 | 0 / 0 | |
| 0.13.17 | 0 / 0 | |
| 0.13.16 | 0 / 0 | |
| 0.13.10 | 0 / 0 | |
| 0.13.9 | 0 / 0 | |
| 0.13.8 | 0 / 0 | |
| 0.13.7 | 0 / 0 | |
| 0.13.6 | 0 / 0 | |
| 0.13.5 | 0 / 0 | |
| 0.13.4 | 0 / 0 | |
| 0.13.3 | 0 / 0 | |
| 0.13.2 | 0 / 0 | |
| 0.13.1 | 0 / 0 | |
| 0.13.0 | 0 / 0 | |
| 0.12.3 | 0 / 0 | |
| 0.12.2 | 0 / 0 | |
| 0.12.1 | 0 / 0 | |
| 0.12.0 | 0 / 0 | |
| 0.11.24 | 0 / 0 | |
| 0.11.23 | 0 / 0 | |
| 0.11.22 | 0 / 0 | |
| 0.11.21 | 0 / 0 | |
| 0.11.20 | 0 / 0 | |
| 0.11.19 | 0 / 0 | |
| 0.11.18 | 0 / 0 | |
| 0.11.17 | 0 / 0 | |
| 0.11.16 | 0 / 0 | |
| 0.11.15 | 0 / 0 | |
| 0.11.14 | 0 / 0 | |
| 0.11.13 | 0 / 0 | |
| 0.11.12 | 0 / 0 | |
| 0.11.11 | 0 / 0 | |
| 0.11.10 | 0 / 0 | |
| 0.11.9 | 0 / 0 | |
| 0.11.8 | 0 / 0 | |
| 0.11.7 | 0 / 0 | |
| 0.11.6 | 0 / 0 | |
| 0.11.5 | 0 / 0 | |
| 0.11.4 | 0 / 0 | |
| 0.11.3 | 0 / 0 | |
| 0.11.2 | 0 / 0 | |
| 0.11.1 | 0 / 0 | |
| 0.11.0 | 0 / 0 | |
| 0.10.44 | 0 / 0 | |
| 0.10.43 | 0 / 0 | |
| 0.10.42 | 0 / 0 | |
| 0.10.41 | 0 / 0 | |
| 0.10.40 | 0 / 0 | |
| 0.10.39 | 0 / 0 | |
| 0.10.38 | 0 / 0 | |
| 0.10.37 | 0 / 0 | |
| 0.10.36 | 0 / 0 | |
| 0.10.35 | 0 / 0 | |
| 0.10.34 | 0 / 0 | |
| 0.10.33 | 0 / 0 | |
| 0.10.32 | 0 / 0 | |
| 0.10.31 | 0 / 0 | |
| 0.10.30 | 0 / 0 | |
| 0.10.29 | 0 / 0 | |
| 0.10.28 | 0 / 0 | |
| 0.10.27 | 0 / 0 | |
| 0.10.26 | 0 / 0 | |
| 0.10.25 | 0 / 0 | |
| 0.10.24 | 0 / 0 | |
| 0.10.23 | 0 / 0 | |
| 0.10.22 | 0 / 0 | |
| 0.10.21 | 0 / 0 | |
| 0.10.20 | 0 / 0 | |
| 0.10.19 | 0 / 0 | |
| 0.10.18 | 0 / 0 | |
| 0.10.17 | 0 / 0 | |
| 0.10.16 | 0 / 0 | |
| 0.10.15 | 0 / 0 | |
| 0.10.14 | 0 / 0 | |
| 0.10.13 | 0 / 0 | |
| 0.10.12 | 0 / 0 |
v0.13.28
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.27
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.26
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.25
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.24
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.23
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.22
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.20
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.19
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.18
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.17
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.16
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.10
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.9
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.8
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.7
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.5
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.13.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.12.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.12.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.12.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.12.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.24
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.23
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.22
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.21
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.20
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.19
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.18
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.17
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.16
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.15
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.14
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.13
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.11
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.10
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.8
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.7
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.5
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.44
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.43
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.42
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.41
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.39
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.38
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.35
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.34
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.33
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.32
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.31
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.30
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.29
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.27
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.26
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.25
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.24
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.23
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.22
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.21
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.20
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.19
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.18
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.17
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.15
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.14
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.13
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.12
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.