← Home

@everymatrix/lottery-oddsbom-bullet

npm
51
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

clokzeoleksandr.v.stepanovtaras.maksymivnatalya.anisimovaemfe_releaserayiispmariana.gheorgheadrian.priponandriizadvirnyiraulvasileemstefan.vladgoe.sutadarie.tisaianustefanaotong.woodtikarncatalinpoclidcristi.ungureanumaria.bumbar1liviuclement.everymatrixmihaibalanfrankie24

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/lottery-oddsbom-bullet/lottery-oddsbom-bullet-15560e49.js AI (source-diff): Minified widget bundle; sample shows standard style/CSS injection code, not obfuscated malware. ai
source-diff obfuscated-file:dist/lottery-oddsbom-bullet/lottery-oddsbom-bullet-3e3ccf5c.js AI (source-diff): Standard Stencil/Rollup minified bundle output; consistent pattern across all @everymatrix component packages. ai
provenance publisher-changed AI (provenance): adrian.pripon is a high-volume approved publisher in this org; transition from emfe_release appears to be a legitimate CI account change. ai
bogus-package bogus-package AI (bogus-package): Internal @everymatrix UI component; sparse metadata is consistent across 195 versions of this org's packages. ai
npm-metadata no-description AI (npm-metadata): Org-wide pattern for internal component packages; not a spam/malware indicator here. ai

Versions (showing 51 of 213)

View all versions
Version Deps Published
0.14.81 0 / 0
0.14.80 0 / 0
0.14.79 0 / 0
0.14.78 0 / 0
0.14.77 0 / 0
0.14.76 0 / 0
0.14.75 0 / 0
0.14.74 0 / 0
0.14.73 0 / 0
0.14.72 0 / 0
0.14.71 0 / 0
0.14.70 0 / 0
0.14.69 0 / 0
0.14.68 0 / 0
0.14.67 0 / 0
0.14.66 0 / 0
0.14.65 0 / 0
0.14.64 0 / 0
0.14.63 0 / 0
0.14.62 0 / 0
0.14.61 0 / 0
0.14.60 0 / 0
0.14.59 0 / 0
0.14.58 0 / 0
0.14.57 0 / 0
0.14.56 0 / 0
0.14.55 0 / 0
0.14.54 0 / 0
0.14.53 0 / 0
0.14.52 0 / 0
0.14.51 0 / 0
0.14.50 0 / 0
0.14.49 0 / 0
0.14.48 0 / 0
0.14.47 0 / 0
0.14.46 0 / 0
0.14.45 0 / 0
0.14.44 0 / 0
0.14.43 0 / 0
0.14.42 0 / 0
0.14.41 0 / 0
0.14.40 0 / 0
0.14.39 0 / 0
0.14.38 0 / 0
0.14.37 0 / 0
0.14.36 0 / 0
0.14.35 0 / 0
0.14.34 0 / 0
0.14.33 0 / 0
0.14.32 0 / 0
0.14.31 0 / 0

v0.14.81

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.80

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.79

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.78

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.77

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.76

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.75

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.74

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.73

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.72

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.71

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.70

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.69

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.68

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.67

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.66

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.65

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.64

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.63

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.62

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.61

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.60

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.59

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.58

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.57

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.56

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.55

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.14.54

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.