@everymatrix/player-account-controller
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@everymatrix/player-withdrawal | AI (phantom-deps): Same-org scoped deps; typical monorepo aggregator pattern. | ai | |
| phantom-deps | phantom-dep:svelte | AI (phantom-deps): Framework dep referenced via config/svelte field, not direct import. | ai | |
| phantom-deps | phantom-dep:sirv-cli | AI (phantom-deps): Used in start script (sirv public), not imported in source. | ai | |
| phantom-deps | phantom-dep:cross-env | AI (phantom-deps): Used in build/dev scripts, not source import. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-CwPGBd7X.cjs | AI (source-diff): Minified bundle; network+dynamic-exec patterns are framework internals, not malware. | ai | |
| source-diff | net-exec-file:components/PlayerAccountTimeout-9en5nzUi.cjs | AI (source-diff): Framework internals, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountTimeout-9en5nzUi.cjs | AI (source-diff): Bundled Vaadin/Stencil component output. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-CwPGBd7X.cjs | AI (source-diff): Bundled minified output from build toolchain, not true obfuscation. | ai | |
| phantom-deps | phantom-dep:@everymatrix/player-deposit | AI (phantom-deps): Same-org scope; typical monorepo aggregator pattern for this package. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountSelfExclusion-BUHYI1Cy.cjs | AI (source-diff): Stencil/bundler minified component output, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PlayerProfileInfo-CfLn6aTk.cjs | AI (source-diff): Bundled Stencil component output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BuyF6Yin.js | AI (source-diff): Bundled build output. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountTimeout-CQdRQ8zb.js | AI (source-diff): Bundled Stencil/Vaadin build output, not true obfuscation. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Normal maintainer rotation. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Normal maintainer rotation for a long-running enterprise package. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-C6gTzyip.js | AI (source-diff): Bundled build output, benign. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-C6gTzyip.js | AI (source-diff): Bundled build output (date-fns/Stencil). | ai | |
| source-diff | net-exec-file:components/PlayerAccountTimeout-CQdRQ8zb.js | AI (source-diff): Standard bundled UI component code, no malicious net+exec behavior found. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountTimeout-DXXa_Vcr.js | AI (source-diff): Bundled build output. | ai | |
| source-diff | net-exec-file:components/PlayerAccountTimeout-DXXa_Vcr.js | AI (source-diff): Bundled build output, benign. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BuyF6Yin.js | AI (source-diff): Bundled build output, benign. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountController-D-iw4Gm1.cjs | AI (source-diff): Minified Svelte/Stencil bundle output, not true obfuscation. | ai | |
| source-diff | net-exec-file:components/PlayerAccountTimeout-BXMQ1wp3.cjs | AI (source-diff): Framework internals, no malicious network exec. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountTimeout-BXMQ1wp3.cjs | AI (source-diff): Bundled Vaadin/Stencil output. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-DIPon42i.cjs | AI (source-diff): Framework boilerplate (customElements/Promise), no fetched payload execution. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-DIPon42i.cjs | AI (source-diff): Bundled Stencil/Vaadin component output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:stencil/player-kyc-verification-Dquts4dV.cjs | AI (source-diff): Stencil bootstrapLazy bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-DopZnDgk.cjs | AI (source-diff): Bundled minified build output, not true obfuscation. | ai | |
| source-diff | net-exec-file:stencil/player-kyc-verification-Dquts4dV.cjs | AI (source-diff): Bundled component loader, no malicious destination. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-DopZnDgk.cjs | AI (source-diff): Standard bundled promise/require code, no hostile network+exec pattern. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountTimeout-BpHfF1KI.cjs | AI (source-diff): Bundled Vaadin/Stencil component output. | ai | |
| source-diff | net-exec-file:components/PlayerAccountTimeout-BpHfF1KI.cjs | AI (source-diff): Bundled component code, benign require/promise usage. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountController-CPE5eIap.cjs | AI (source-diff): Stencil/Svelte bundler minified output, not true obfuscation. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Long-standing monorepo package convention, not spam indicator. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large component library with many Svelte/Stencil chunks; consistent with this package's history. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-CjoAdG2a.cjs | AI (source-diff): Same Vaadin dev-mode pattern as other components; not malicious. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-CjoAdG2a.cjs | AI (source-diff): Minified Svelte component; standard build output. | ai | |
| source-diff | net-exec-file:components/PlayerAccountTimeout-BL6M_CZ5.cjs | AI (source-diff): net+exec pattern is Vaadin dev-mode detection (new Function + fetch); not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountTimeout-BL6M_CZ5.cjs | AI (source-diff): Minified Svelte component; Vaadin dev-mode detection pattern, not malware. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountController-ONtI_Q5Y.cjs | AI (source-diff): Minified Svelte runtime/controller bundle; standard build output. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountClosure-Dnj9Ms2z.cjs | AI (source-diff): Minified Svelte component; readable i18n strings in sample. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountBiometricsAction-BJGl8yGF.cjs | AI (source-diff): Minified Svelte component; readable content in sample. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountBiometrics-Bv3EIWOX.cjs | AI (source-diff): Minified Svelte component; readable content in sample. | ai | |
| source-diff | obfuscated-file:components/PlayerAccountBettingHistory-01UT9x8V.cjs | AI (source-diff): Minified Svelte component with readable i18n strings. | ai | |
| source-diff | obfuscated-file:stencil/player-step-up-auth_2-CsB4lmme.cjs | AI (source-diff): Minified Stencil component; OTP UI logic visible in sample. | ai | |
| source-diff | obfuscated-file:components/GeneralLogout-DGxIOLS-.cjs | AI (source-diff): Standard minified Svelte build output; readable i18n and CSS visible in sample. | ai | |
| source-diff | obfuscated-file:stencil/index-2ff63899-C0l4gDXZ.cjs | AI (source-diff): Standard minified Stencil runtime bundle; no malicious patterns. | ai | |
| source-diff | net-exec-file:stencil/checkbox-group-input_16-DTlEvXD1.cjs | AI (source-diff): Stencil lazy-loading pattern: dynamic require() for component bundles, not dropper malware. | ai | |
| source-diff | net-exec-file:stencil/checkbox-group-input_16-nRSc7WyI.js | AI (source-diff): Stencil lazy-loading pattern; stable for this package. | ai | |
| source-diff | net-exec-file:stencil/checkbox-group-input_16-BzEg4TpU.js | AI (source-diff): Stencil lazy-loading pattern; stable for this package. | ai | |
| source-diff | net-exec-file:stencil/user-transaction-history_2--tfZWSJL.cjs | AI (source-diff): Stencil lazy-loading pattern; stable for this package. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-B0wQpvD6.cjs | AI (source-diff): Stencil lazy-loading pattern; stable for this package. | ai | |
| source-diff | net-exec-file:components/PlayerAccountTimeout-B4aNgv8R.cjs | AI (source-diff): Stencil lazy-loading pattern; stable for this package. | ai | |
| source-diff | net-exec-file:stencil/player-kyc-verification-NcanG7Cb.cjs | AI (source-diff): Stencil lazy-loading pattern; stable for this package. | ai | |
| source-diff | obfuscated-file:stencil/checkbox-group-input_16-DTlEvXD1.cjs | AI (source-diff): Standard Stencil minified build output; pattern is stable across all versions of this package. | ai | |
| source-diff | obfuscated-file:stencil/index-9c0f6c58-DlXOBm1V.cjs | AI (source-diff): Stencil framework runtime bundle; standard minified output for this package type. | ai | |
| source-diff | net-exec-file:stencil/player-kyc-verification-BO_q93r0.js | AI (source-diff): Stencil ESM bundle; dynamic import is framework code splitting. | ai | |
| source-diff | net-exec-file:stencil/player-kyc-verification-BhngQMYp.js | AI (source-diff): Stencil ESM bundle; dynamic import is framework code splitting. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-DXHnya6D.cjs | AI (source-diff): Same Svelte component pattern; no malicious payload in samples. | ai | |
| source-diff | net-exec-file:components/PlayerAccountTimeout-B_8NcUA8.cjs | AI (source-diff): Svelte component with API calls; net+exec pattern is framework artifact, not dropper. | ai | |
| source-diff | net-exec-file:stencil/player-kyc-verification-ISE1zaDp.cjs | AI (source-diff): Stencil bootstrapLazy() uses dynamic import for code splitting, not malicious execution. | ai | |
| source-diff | obfuscated-file:stencil/player-kyc-verification-ISE1zaDp.cjs | AI (source-diff): Stencil lazy-loaded component bundle; bootstrapLazy pattern is normal for this framework. | ai | |
| source-diff | obfuscated-file:components/GeneralLogout-MWlMEMui.cjs | AI (source-diff): Standard Svelte compiled bundle; readable i18n, CSS, and component logic visible in sample. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped component library; missing metadata fields are cosmetic, not indicative of malice. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Fires inside vaadin-development-mode-detector utility; stable pattern across all versions of this component library. | ai |
Versions (showing 100 of 466)
| Version | Deps | Published |
|---|---|---|
| 1.89.1 | 0 / 0 | |
| 1.89.0 | 0 / 0 | |
| 1.88.24 | 0 / 0 | |
| 1.88.23 | 0 / 0 | |
| 1.88.22 | 0 / 0 | |
| 1.88.21 | 0 / 0 | |
| 1.88.20 | 0 / 0 | |
| 1.88.19 | 0 / 0 | |
| 1.88.18 | 0 / 0 | |
| 1.88.17 | 0 / 0 | |
| 1.88.16 | 0 / 0 | |
| 1.88.15 | 0 / 0 | |
| 1.88.14 | 0 / 0 | |
| 1.88.13 | 0 / 0 | |
| 1.88.12 | 0 / 0 | |
| 1.88.11 | 0 / 0 | |
| 1.88.10 | 0 / 0 | |
| 1.88.9 | 0 / 0 | |
| 1.88.8 | 0 / 0 | |
| 1.88.7 | 0 / 0 | |
| 1.88.6 | 0 / 0 | |
| 1.88.5 | 0 / 0 | |
| 1.88.4 | 0 / 0 | |
| 1.88.3 | 0 / 0 | |
| 1.88.2 | 0 / 0 | |
| 1.88.1 | 0 / 0 | |
| 1.88.0 | 0 / 0 | |
| 1.87.44 | 0 / 0 | |
| 1.87.43 | 0 / 0 | |
| 1.87.42 | 0 / 0 | |
| 1.87.41 | 0 / 0 | |
| 1.87.40 | 0 / 0 | |
| 1.87.39 | 0 / 0 | |
| 1.87.38 | 0 / 0 | |
| 1.87.37 | 0 / 0 | |
| 1.87.36 | 0 / 0 | |
| 1.87.35 | 0 / 0 | |
| 1.87.34 | 0 / 0 | |
| 1.87.33 | 0 / 0 | |
| 1.87.32 | 0 / 0 | |
| 1.87.31 | 0 / 0 | |
| 1.87.30 | 0 / 0 | |
| 1.87.29 | 0 / 0 | |
| 1.87.28 | 0 / 0 | |
| 1.87.27 | 0 / 0 | |
| 1.87.26 | 0 / 0 | |
| 1.87.25 | 0 / 0 | |
| 1.87.24 | 0 / 0 | |
| 1.87.23 | 0 / 0 | |
| 1.87.22 | 0 / 0 | |
| 1.87.21 | 0 / 0 | |
| 1.87.20 | 0 / 0 | |
| 1.87.19 | 0 / 0 | |
| 1.87.18 | 0 / 0 | |
| 1.87.17 | 0 / 0 | |
| 1.87.16 | 0 / 0 | |
| 1.87.15 | 0 / 0 | |
| 1.87.14 | 0 / 0 | |
| 1.87.13 | 0 / 0 | |
| 1.87.12 | 0 / 0 | |
| 1.87.11 | 0 / 0 | |
| 1.87.10 | 0 / 0 | |
| 1.87.9 | 0 / 0 | |
| 1.87.8 | 0 / 0 | |
| 1.87.7 | 0 / 0 | |
| 1.87.6 | 0 / 0 | |
| 1.87.5 | 0 / 0 | |
| 1.87.4 | 0 / 0 | |
| 1.87.3 | 0 / 0 | |
| 1.87.2 | 0 / 0 | |
| 1.87.1 | 0 / 0 | |
| 1.87.0 | 0 / 0 | |
| 1.86.30 | 0 / 0 | |
| 1.86.29 | 0 / 0 | |
| 1.86.28 | 0 / 0 | |
| 1.86.27 | 0 / 0 | |
| 1.86.26 | 0 / 0 | |
| 1.86.25 | 0 / 0 | |
| 1.86.24 | 0 / 0 | |
| 1.86.23 | 0 / 0 | |
| 1.86.22 | 0 / 0 | |
| 1.86.21 | 0 / 0 | |
| 1.86.20 | 0 / 0 | |
| 1.86.12 | 0 / 0 | |
| 1.86.11 | 0 / 0 | |
| 1.86.10 | 0 / 0 | |
| 1.86.9 | 0 / 0 | |
| 1.86.7 | 0 / 0 | |
| 1.86.5 | 0 / 0 | |
| 1.86.4 | 0 / 0 | |
| 1.86.3 | 0 / 0 | |
| 1.86.2 | 0 / 0 | |
| 1.86.1 | 0 / 0 | |
| 1.86.0 | 0 / 0 | |
| 1.85.23 | 0 / 0 | |
| 1.85.22 | 0 / 0 | |
| 1.85.21 | 0 / 0 | |
| 1.85.20 | 0 / 0 | |
| 1.85.19 | 0 / 0 | |
| 1.85.18 | 0 / 0 |
v1.89.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.89.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.24
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.23
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.22
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.21
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.19
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.18
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.15
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.13
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.88.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.44
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.43
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.42
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.41
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.40
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.39
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.38
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.37
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.36
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.35
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.34
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.33
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.32
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.31
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.30
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.29
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.28
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.27
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.26
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.25
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.24
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.23
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.22
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.21
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.19
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.18
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.15
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.13
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.87.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.30
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.29
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.28
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.27
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.26
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.25
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.24
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.23
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.22
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.21
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.86.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.85.23
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.85.22
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.85.21
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.85.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.85.19
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.85.18
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.