@everymatrix/lottery-oddsbom-bomb
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/cjs/lottery-oddsbom-bomb-3ef3e529.js | AI (source-diff): Standard Stencil.js minified bundle output; not malicious obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/lottery-oddsbom-bomb/lottery-oddsbom-bomb-c5cc49c2.js | AI (source-diff): Standard Stencil.js minified bundle; not malicious obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/lottery-oddsbom-bomb-c5cc49c2.js | AI (source-diff): Standard Stencil.js minified ESM bundle; not malicious obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/lottery-oddsbom-bomb-1f8981ad.js | AI (source-diff): Standard Stencil minified bundle; long lines are minification artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/lottery-oddsbom-bomb-37ea28d6.js | AI (source-diff): Standard Stencil minified ESM bundle; same pattern as CJS counterpart. | ai | |
| source-diff | obfuscated-file:dist/lottery-oddsbom-bomb/lottery-oddsbom-bomb-37ea28d6.js | AI (source-diff): Minified widget bundle consistent with Stencil build output for this package family. | ai | |
| source-diff | obfuscated-file:dist/esm/lottery-oddsbom-bomb-8428ae68.js | AI (source-diff): Standard Stencil minified ESM bundle; consistent pattern across all @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/lottery-oddsbom-bomb/lottery-oddsbom-bomb-8428ae68.js | AI (source-diff): Standard Stencil minified bundle; consistent pattern across all @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/cjs/lottery-oddsbom-bomb-d8e5e551.js | AI (source-diff): Standard Stencil minified CJS bundle; consistent pattern across all @everymatrix widget packages. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Internal @everymatrix widget component; missing description is consistent across this package family. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Org-scoped widget package published from private Artifactory; sparse metadata is expected for internal component packages. | ai |
Versions (showing 51 of 168)
| Version | Deps | Published |
|---|---|---|
| 0.7.81 | 0 / 0 | |
| 0.7.80 | 0 / 0 | |
| 0.7.79 | 0 / 0 | |
| 0.7.78 | 0 / 0 | |
| 0.7.77 | 0 / 0 | |
| 0.7.76 | 0 / 0 | |
| 0.7.75 | 0 / 0 | |
| 0.7.74 | 0 / 0 | |
| 0.7.73 | 0 / 0 | |
| 0.7.72 | 0 / 0 | |
| 0.7.71 | 0 / 0 | |
| 0.7.70 | 0 / 0 | |
| 0.7.69 | 0 / 0 | |
| 0.7.68 | 0 / 0 | |
| 0.7.67 | 0 / 0 | |
| 0.7.66 | 0 / 0 | |
| 0.7.65 | 0 / 0 | |
| 0.7.64 | 0 / 0 | |
| 0.7.63 | 0 / 0 | |
| 0.7.62 | 0 / 0 | |
| 0.7.61 | 0 / 0 | |
| 0.7.60 | 0 / 0 | |
| 0.7.59 | 0 / 0 | |
| 0.7.58 | 0 / 0 | |
| 0.7.57 | 0 / 0 | |
| 0.7.56 | 0 / 0 | |
| 0.7.55 | 0 / 0 | |
| 0.7.54 | 0 / 0 | |
| 0.7.53 | 0 / 0 | |
| 0.7.52 | 0 / 0 | |
| 0.7.51 | 0 / 0 | |
| 0.7.50 | 0 / 0 | |
| 0.7.49 | 0 / 0 | |
| 0.7.48 | 0 / 0 | |
| 0.7.47 | 0 / 0 | |
| 0.7.46 | 0 / 0 | |
| 0.7.45 | 0 / 0 | |
| 0.7.44 | 0 / 0 | |
| 0.7.43 | 0 / 0 | |
| 0.7.42 | 0 / 0 | |
| 0.7.41 | 0 / 0 | |
| 0.7.40 | 0 / 0 | |
| 0.7.39 | 0 / 0 | |
| 0.7.38 | 0 / 0 | |
| 0.7.37 | 0 / 0 | |
| 0.7.36 | 0 / 0 | |
| 0.7.35 | 0 / 0 | |
| 0.7.34 | 0 / 0 | |
| 0.7.33 | 0 / 0 | |
| 0.7.32 | 0 / 0 | |
| 0.7.31 | 0 / 0 |
v0.7.81
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.80
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.78
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.77
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.76
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.75
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.74
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.73
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.72
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.71
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.70
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.69
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.68
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.67
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.66
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.65
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.64
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.63
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.62
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.61
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.60
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.59
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.58
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.56
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.55
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.7.54
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.