@everymatrix/lottery-oddsbom-bullet
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/lottery-oddsbom-bullet/lottery-oddsbom-bullet-15560e49.js | AI (source-diff): Minified widget bundle; sample shows standard style/CSS injection code, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/lottery-oddsbom-bullet/lottery-oddsbom-bullet-3e3ccf5c.js | AI (source-diff): Standard Stencil/Rollup minified bundle output; consistent pattern across all @everymatrix component packages. | ai | |
| provenance | publisher-changed | AI (provenance): adrian.pripon is a high-volume approved publisher in this org; transition from emfe_release appears to be a legitimate CI account change. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Internal @everymatrix UI component; sparse metadata is consistent across 195 versions of this org's packages. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Org-wide pattern for internal component packages; not a spam/malware indicator here. | ai |
Versions (showing 100 of 214)
| Version | Deps | Published |
|---|---|---|
| 0.14.82 | 0 / 0 | |
| 0.14.81 | 0 / 0 | |
| 0.14.80 | 0 / 0 | |
| 0.14.79 | 0 / 0 | |
| 0.14.78 | 0 / 0 | |
| 0.14.77 | 0 / 0 | |
| 0.14.76 | 0 / 0 | |
| 0.14.75 | 0 / 0 | |
| 0.14.74 | 0 / 0 | |
| 0.14.73 | 0 / 0 | |
| 0.14.72 | 0 / 0 | |
| 0.14.71 | 0 / 0 | |
| 0.14.70 | 0 / 0 | |
| 0.14.69 | 0 / 0 | |
| 0.14.68 | 0 / 0 | |
| 0.14.67 | 0 / 0 | |
| 0.14.66 | 0 / 0 | |
| 0.14.65 | 0 / 0 | |
| 0.14.64 | 0 / 0 | |
| 0.14.63 | 0 / 0 | |
| 0.14.62 | 0 / 0 | |
| 0.14.61 | 0 / 0 | |
| 0.14.60 | 0 / 0 | |
| 0.14.59 | 0 / 0 | |
| 0.14.58 | 0 / 0 | |
| 0.14.57 | 0 / 0 | |
| 0.14.56 | 0 / 0 | |
| 0.14.55 | 0 / 0 | |
| 0.14.54 | 0 / 0 | |
| 0.14.53 | 0 / 0 | |
| 0.14.52 | 0 / 0 | |
| 0.14.51 | 0 / 0 | |
| 0.14.50 | 0 / 0 | |
| 0.14.49 | 0 / 0 | |
| 0.14.48 | 0 / 0 | |
| 0.14.47 | 0 / 0 | |
| 0.14.46 | 0 / 0 | |
| 0.14.45 | 0 / 0 | |
| 0.14.44 | 0 / 0 | |
| 0.14.43 | 0 / 0 | |
| 0.14.42 | 0 / 0 | |
| 0.14.41 | 0 / 0 | |
| 0.14.40 | 0 / 0 | |
| 0.14.39 | 0 / 0 | |
| 0.14.38 | 0 / 0 | |
| 0.14.37 | 0 / 0 | |
| 0.14.36 | 0 / 0 | |
| 0.14.35 | 0 / 0 | |
| 0.14.34 | 0 / 0 | |
| 0.14.33 | 0 / 0 | |
| 0.14.32 | 0 / 0 | |
| 0.14.31 | 0 / 0 | |
| 0.14.30 | 0 / 0 | |
| 0.14.29 | 0 / 0 | |
| 0.14.28 | 0 / 0 | |
| 0.14.27 | 0 / 0 | |
| 0.14.26 | 0 / 0 | |
| 0.14.25 | 0 / 0 | |
| 0.14.24 | 0 / 0 | |
| 0.14.23 | 0 / 0 | |
| 0.14.22 | 0 / 0 | |
| 0.14.21 | 0 / 0 | |
| 0.14.20 | 0 / 0 | |
| 0.14.19 | 0 / 0 | |
| 0.14.18 | 0 / 0 | |
| 0.14.17 | 0 / 0 | |
| 0.14.16 | 0 / 0 | |
| 0.14.15 | 0 / 0 | |
| 0.14.9 | 0 / 0 | |
| 0.14.8 | 0 / 0 | |
| 0.14.7 | 0 / 0 | |
| 0.14.6 | 0 / 0 | |
| 0.14.5 | 0 / 0 | |
| 0.14.4 | 0 / 0 | |
| 0.14.3 | 0 / 0 | |
| 0.14.2 | 0 / 0 | |
| 0.14.1 | 0 / 0 | |
| 0.14.0 | 0 / 0 | |
| 0.13.15 | 0 / 0 | |
| 0.13.14 | 0 / 0 | |
| 0.13.13 | 0 / 0 | |
| 0.13.12 | 0 / 0 | |
| 0.13.11 | 0 / 0 | |
| 0.13.10 | 0 / 0 | |
| 0.13.9 | 0 / 0 | |
| 0.13.8 | 0 / 0 | |
| 0.13.7 | 0 / 0 | |
| 0.13.6 | 0 / 0 | |
| 0.13.5 | 0 / 0 | |
| 0.13.4 | 0 / 0 | |
| 0.13.3 | 0 / 0 | |
| 0.13.2 | 0 / 0 | |
| 0.13.1 | 0 / 0 | |
| 0.13.0 | 0 / 0 | |
| 0.12.8 | 0 / 0 | |
| 0.12.7 | 0 / 0 | |
| 0.12.6 | 0 / 0 | |
| 0.12.5 | 0 / 0 | |
| 0.12.4 | 0 / 0 | |
| 0.12.3 | 0 / 0 |
v0.14.82
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.81
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.80
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.78
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.77
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.76
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.75
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.74
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.73
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.72
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.71
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.70
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.69
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.68
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.67
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.66
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.65
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.64
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.63
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.62
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.61
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.60
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.59
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.58
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.56
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.55
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.54
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.