@everymatrix/general-player-forgot-password-form-nd
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-CediPN1i.cjs | AI (source-diff): Standard Rollup/Vite minified bundle output for a Svelte component; not intentionally obfuscated. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-V2TZp7-L.js | AI (source-diff): Minified Svelte bundle; stable false positive. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-DfpkIkXT.js | AI (source-diff): Minified Svelte bundle; stable false positive. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-BCPX2Z9Q.cjs | AI (source-diff): Minified Svelte bundle; stable false positive. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-kuYGNEIx.js | AI (source-diff): Svelte runtime network/exec pattern; not malicious. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-kuYGNEIx.js | AI (source-diff): Minified Svelte bundle; stable false positive for this package. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-BRw2mNbz.js | AI (source-diff): Same Svelte runtime pattern; not malicious. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-BRw2mNbz.js | AI (source-diff): Same Rollup/Vite minified Svelte bundle pattern. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-CediPN1i.cjs | AI (source-diff): Network calls and dynamic execution are Svelte runtime patterns (fetch for i18n, dynamic component rendering), not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-BNHZGebC.js | AI (source-diff): Minified Vite/Rollup bundle output; readable Svelte runtime code, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-DQs7ZL5h.js | AI (source-diff): Minified Svelte component bundle; same pattern as other files in this package. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-Dc-aW1Ro.js | AI (source-diff): Minified Svelte component bundle; imports from sibling file, not obfuscation. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-vHboKcRo.js | AI (source-diff): Same Svelte runtime network/DOM pattern; not malicious. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-vHboKcRo.js | AI (source-diff): Same minified Svelte bundle pattern; not obfuscation. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-BNHZGebC.js | AI (source-diff): Network calls and dynamic code are standard Svelte component fetch/DOM patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-6VkSg6vF.js | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-CfaQEOJa.cjs | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-9bJr1hqg.cjs | AI (source-diff): Network calls and dynamic code are Svelte framework patterns (fetch + Promise); no dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-9bJr1hqg.cjs | AI (source-diff): Standard Svelte/Vite minified build output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-Bnh9kZlJ.js | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-BmWaejpp.js | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-D67_z7C4.js | AI (source-diff): Network calls and dynamic code are Svelte framework patterns; no dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-D67_z7C4.js | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-6VkSg6vF.js | AI (source-diff): Network calls and dynamic code are Svelte framework patterns; no dropper behavior. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-CsE9ESWu.cjs | AI (source-diff): Network calls and dynamic execution are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-CqSiRmcO.js | AI (source-diff): Network calls and dynamic execution are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-CqSiRmcO.js | AI (source-diff): Standard Vite/Svelte minified build artifact; consistent with this package's established build pipeline. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-Bm5GwVTm.js | AI (source-diff): Network calls and dynamic execution are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-Bm5GwVTm.js | AI (source-diff): Standard Vite/Svelte minified build artifact; consistent with this package's established build pipeline. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-CsE9ESWu.cjs | AI (source-diff): Standard Vite/Svelte minified build artifact; consistent with this package's established build pipeline. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-DKhLI8CP.cjs | AI (source-diff): Network calls and dynamic code are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-C94Fg4vY.js | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-BHCK5b0Y.js | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-DSdVVjUO.js | AI (source-diff): Network calls and dynamic code are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-DSdVVjUO.js | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-CxWaMZ-H.js | AI (source-diff): Network calls and dynamic code are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-CxWaMZ-H.js | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-DUo-Gv6e.cjs | AI (source-diff): Standard Svelte/Vite minified build output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-DKhLI8CP.cjs | AI (source-diff): Standard Svelte/Vite minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-q0Rkr7_k.cjs | AI (source-diff): Standard Svelte/Vite minified bundle output; not obfuscation. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-q0Rkr7_k.cjs | AI (source-diff): DOM/fetch calls in Svelte runtime bundle; not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-BbOiU-Q7.cjs | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-BjZsZd5D.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-BjZsZd5D.js | AI (source-diff): DOM/fetch calls in Svelte runtime bundle; not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-dxvMBzO1.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-dxvMBzO1.js | AI (source-diff): DOM/fetch calls in Svelte runtime bundle; not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-CcH-78-j.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-CO22htQd.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-CzyXcPLy.cjs | AI (source-diff): Standard Vite/Rollup minified bundle for a Svelte component; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-DEGxwZar.js | AI (source-diff): Minified Svelte bundle; false positive. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-CZ4sauHW.js | AI (source-diff): Minified Svelte bundle; false positive. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-CSDhpguc.cjs | AI (source-diff): Minified Svelte/CJS bundle; false positive. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-CWg7OQqq.js | AI (source-diff): Same Svelte bundle; false positive. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-CWg7OQqq.js | AI (source-diff): Minified Svelte bundle; stable false positive for this package. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-CGPuWytt.js | AI (source-diff): Same Svelte bundle; net+exec pattern is Svelte runtime + vaadin dev detector, not malware. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-CGPuWytt.js | AI (source-diff): Same Svelte bundle, minified output; false positive for this package. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-CzyXcPLy.cjs | AI (source-diff): Network calls and dynamic code are Svelte runtime patterns (fetch for i18n/API, new Function in vaadin dev-mode detector); no dropper behavior. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-BAnLT2lx.cjs | AI (source-diff): Network calls and dynamic code are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-BOGivfUg.cjs | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-DViiEZCu.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-CgGL8acE.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-JBlHWA1X.js | AI (source-diff): Svelte runtime patterns; not malicious. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-JBlHWA1X.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-CUu6viTK.js | AI (source-diff): Svelte runtime patterns; not malicious. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-CUu6viTK.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-BAnLT2lx.cjs | AI (source-diff): Standard Svelte/Vite minified bundle output; not obfuscation. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-zHNWL0BM.cjs | AI (source-diff): Network+exec pattern is Promise/async transpilation in Svelte runtime, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-NyHeBvzg.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-D5AmVWDf.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-ByDXjWJp.cjs | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-DQXQ3vdz.js | AI (source-diff): Promise/async transpilation in Svelte runtime, not malicious. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-DQXQ3vdz.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd--lcRUmPc.js | AI (source-diff): Promise/async transpilation in Svelte runtime, not malicious. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd--lcRUmPc.js | AI (source-diff): Standard Svelte/Vite minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-zHNWL0BM.cjs | AI (source-diff): Standard Svelte/Vite minified bundle output; consistent with publisher's established build pattern. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-BUHmQ4bm.cjs | AI (source-diff): Standard Vite/Svelte minified bundle; hashed filename pattern consistent with build tooling across all versions. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-Dv9H1vME.js | AI (source-diff): Standard Vite/Svelte minified bundle. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-Dcjz0B3u.js | AI (source-diff): Standard Vite/Svelte minified bundle. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-DBjwfb5b.cjs | AI (source-diff): Standard Vite/Svelte minified bundle. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-fV-zedcH.js | AI (source-diff): False positive; same Svelte runtime pattern. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-fV-zedcH.js | AI (source-diff): Standard Vite/Svelte minified bundle. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-DmF1pc4p.js | AI (source-diff): False positive; same Svelte runtime pattern. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-DmF1pc4p.js | AI (source-diff): Standard Vite/Svelte minified bundle. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-BUHmQ4bm.cjs | AI (source-diff): False positive; network+exec pattern matches Svelte runtime fetch/Promise patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-incAvPee.cjs | AI (source-diff): Standard Vite/Svelte minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-CEQES2b4.js | AI (source-diff): Standard Vite/Svelte minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordSmsForm-BF4gOAT0.js | AI (source-diff): Standard Vite/Svelte minified bundle output. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-CsvFloXQ.js | AI (source-diff): Standard Vite/Svelte minified bundle output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-CsvFloXQ.js | AI (source-diff): Svelte runtime patterns; not malicious. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-kvkTqATm.cjs | AI (source-diff): Standard Vite/Svelte minified bundle output; consistent with package purpose. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-kvkTqATm.cjs | AI (source-diff): Network calls and dynamic code are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/GeneralPlayerForgotPasswordFormNd-BvnyJJPf.js | AI (source-diff): Standard Vite/Svelte minified bundle output. | ai | |
| source-diff | net-exec-file:components/GeneralPlayerForgotPasswordFormNd-BvnyJJPf.js | AI (source-diff): Svelte runtime patterns; not malicious. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped monorepo component package; sparse metadata is consistent across all 401 versions. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Fires inside Vaadin dev-mode detector bundle code; stable false positive for this package. | ai |
Versions (showing 100 of 255)
| Version | Deps | Published |
|---|---|---|
| 1.92.1 | 0 / 0 | |
| 1.92.0 | 0 / 0 | |
| 1.91.2 | 0 / 0 | |
| 1.91.1 | 0 / 0 | |
| 1.90.37 | 0 / 0 | |
| 1.90.36 | 0 / 0 | |
| 1.90.35 | 0 / 0 | |
| 1.90.34 | 0 / 0 | |
| 1.90.33 | 0 / 0 | |
| 1.90.32 | 0 / 0 | |
| 1.90.31 | 0 / 0 | |
| 1.90.30 | 0 / 0 | |
| 1.90.29 | 0 / 0 | |
| 1.86.12 | 0 / 0 | |
| 1.86.11 | 0 / 0 | |
| 1.86.10 | 0 / 0 | |
| 1.86.9 | 0 / 0 | |
| 1.86.7 | 0 / 0 | |
| 1.86.5 | 0 / 0 | |
| 1.86.2 | 0 / 0 | |
| 1.86.1 | 0 / 0 | |
| 1.86.0 | 0 / 0 | |
| 1.85.23 | 0 / 0 | |
| 1.85.22 | 0 / 0 | |
| 1.85.21 | 0 / 0 | |
| 1.85.20 | 0 / 0 | |
| 1.85.19 | 0 / 0 | |
| 1.85.18 | 0 / 0 | |
| 1.85.17 | 0 / 0 | |
| 1.85.16 | 0 / 0 | |
| 1.85.15 | 0 / 0 | |
| 1.85.14 | 0 / 0 | |
| 1.85.13 | 0 / 0 | |
| 1.85.11 | 0 / 0 | |
| 1.85.10 | 0 / 0 | |
| 1.85.9 | 0 / 0 | |
| 1.85.8 | 0 / 0 | |
| 1.85.7 | 0 / 0 | |
| 1.85.6 | 0 / 0 | |
| 1.85.5 | 0 / 0 | |
| 1.85.4 | 0 / 0 | |
| 1.85.3 | 0 / 0 | |
| 1.85.2 | 0 / 0 | |
| 1.85.1 | 0 / 0 | |
| 1.85.0 | 0 / 0 | |
| 1.84.3 | 0 / 0 | |
| 1.84.2 | 0 / 0 | |
| 1.84.1 | 0 / 0 | |
| 1.84.0 | 0 / 0 | |
| 1.83.12 | 0 / 0 | |
| 1.83.11 | 0 / 0 | |
| 1.83.10 | 0 / 0 | |
| 1.83.9 | 0 / 0 | |
| 1.83.8 | 0 / 0 | |
| 1.83.7 | 0 / 0 | |
| 1.83.6 | 0 / 0 | |
| 1.83.5 | 0 / 0 | |
| 1.83.4 | 0 / 0 | |
| 1.76.3 | 0 / 0 | |
| 1.74.10 | 0 / 0 | |
| 1.74.3 | 0 / 0 | |
| 1.67.3 | 0 / 0 | |
| 1.67.0 | 0 / 0 | |
| 1.66.2 | 0 / 0 | |
| 1.66.1 | 0 / 0 | |
| 1.66.0 | 0 / 0 | |
| 1.65.3 | 0 / 0 | |
| 1.65.2 | 0 / 0 | |
| 1.65.1 | 0 / 0 | |
| 1.65.0 | 0 / 0 | |
| 1.64.8 | 0 / 0 | |
| 1.64.7 | 0 / 0 | |
| 1.64.6 | 0 / 0 | |
| 1.64.5 | 0 / 0 | |
| 1.64.4 | 0 / 0 | |
| 1.64.2 | 0 / 0 | |
| 1.64.1 | 0 / 0 | |
| 1.64.0 | 0 / 0 | |
| 1.63.3 | 0 / 0 | |
| 1.63.2 | 0 / 0 | |
| 1.63.1 | 0 / 0 | |
| 1.63.0 | 0 / 0 | |
| 1.62.4 | 0 / 0 | |
| 1.62.3 | 0 / 0 | |
| 1.62.2 | 0 / 0 | |
| 1.62.1 | 0 / 0 | |
| 1.62.0 | 0 / 0 | |
| 1.61.1 | 0 / 0 | |
| 1.61.0 | 0 / 0 | |
| 1.60.2 | 0 / 0 | |
| 1.60.1 | 0 / 0 | |
| 1.60.0 | 0 / 0 | |
| 1.59.3 | 0 / 0 | |
| 1.59.2 | 0 / 0 | |
| 1.59.1 | 0 / 0 | |
| 1.59.0 | 0 / 0 | |
| 1.58.1 | 0 / 0 | |
| 1.58.0 | 0 / 0 | |
| 1.57.0 | 0 / 0 | |
| 1.56.3 | 0 / 0 |
v1.65.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.65.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.65.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.64.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.63.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.63.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.63.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.63.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.62.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.61.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.61.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.60.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.60.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.60.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.59.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.59.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.59.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.59.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.58.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.58.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.57.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.56.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.