← Home

@everymatrix/player-gaming-history

npm
100
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

clokzeoleksandr.v.stepanovtaras.maksymivnatalya.anisimovaemfe_releaserayiispmariana.gheorgheadrian.priponandriizadvirnyiraulvasileemstefan.vladgoe.sutadarie.tisaianustefanaotong.woodtikarncatalinpoclidcristi.ungureanumaria.bumbar1liviuclement.everymatrixmihaibalanfrankie24

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff net-exec-file:components/PlayerGamingHistory-CUzAxWEX.js AI (source-diff): Bundled svelte runtime; no fetched/executed remote payload. ai
source-diff obfuscated-file:components/PlayerAccountGamingLimitsGroupEdit-BEuEPUET.js AI (source-diff): Bundled Vite/Rollup output, not true obfuscation. ai
source-diff net-exec-file:components/PlayerGamingHistory-DQsYtBso.js AI (source-diff): Bundled svelte runtime; no fetched/executed remote payload. ai
phantom-deps phantom-dep:cross-env AI (phantom-deps): Used in build/dev scripts only. ai
phantom-deps phantom-dep:sirv-cli AI (phantom-deps): Used via 'start' script, not source import; standard dev tool. ai
phantom-deps phantom-dep:@vaadin/vaadin-date-picker AI (phantom-deps): Likely used in svelte template markup, not JS import. ai
phantom-deps phantom-dep:svelte AI (phantom-deps): Framework referenced via config/svelte field. ai
source-diff obfuscated-file:components/PlayerGamingHistory-BLk2WYYM.cjs AI (source-diff): Bundled Svelte/Vaadin component output, not true obfuscation. ai
source-diff net-exec-file:components/PlayerGamingHistory-BLk2WYYM.cjs AI (source-diff): Bundled framework code with fetch+Function, not a loader/dropper. ai
source-diff net-exec-file:components/PlayerGamingHistory-DAhQYl3h.cjs AI (source-diff): Bundler dynamic-import pattern, no exfil/fetch-exec behavior found. ai
source-diff obfuscated-file:components/PlayerGamingHistory-DAhQYl3h.cjs AI (source-diff): Bundled Svelte component output, not true obfuscation. ai
source-diff net-exec-file:components/PlayerGamingHistory-CjQtIh-n.js AI (source-diff): Same bundled dev-mode helper pattern as sibling file. ai
source-diff net-exec-file:components/PlayerGamingHistory-fXqpl1eg.cjs AI (source-diff): Same bundled dev-mode helper pattern, cjs build output. ai
source-diff net-exec-file:components/PlayerGamingHistory-BybKqTVn.js AI (source-diff): Standard bundled runtime code, no evidence of dropper behavior. ai
source-diff obfuscated-file:components/PlayerGamingHistory-BybKqTVn.js AI (source-diff): Bundled Svelte/rollup output, not obfuscation; recurring pattern in this component library. ai
npm-metadata no-description AI (npm-metadata): Internal component package, consistently missing description across versions. ai
source-diff obfuscated-file:components/PlayerAccountGamingLimitsInfoCard-D_Gu4ZW5.js AI (source-diff): Minified Svelte component bundle; consistent with package pattern. ai
source-diff obfuscated-file:components/PlayerGamingHistory-WZwkrHpz.cjs AI (source-diff): Standard Vite/Svelte minified bundle output; not obfuscation. ai
source-diff net-exec-file:components/PlayerGamingHistory-WZwkrHpz.cjs AI (source-diff): Svelte runtime fetch+requestAnimationFrame pattern; not dropper malware. ai
source-diff obfuscated-file:components/PlayerGamingHistory-DJ6Y4p90.js AI (source-diff): Standard Vite/Svelte minified bundle output. ai
source-diff net-exec-file:components/PlayerGamingHistory-DJ6Y4p90.js AI (source-diff): Svelte runtime pattern; not dropper malware. ai
source-diff obfuscated-file:components/PlayerGamingHistory-Jfofjvcb.js AI (source-diff): Standard Vite/Svelte minified bundle output. ai
source-diff net-exec-file:components/PlayerGamingHistory-Jfofjvcb.js AI (source-diff): Svelte runtime pattern; not dropper malware. ai
source-diff obfuscated-file:components/PlayerAccountGamingLimitsConfirmationModal-BK9EH9Rt.cjs AI (source-diff): Minified Svelte component bundle; i18n strings and CSS visible in sample. ai
source-diff obfuscated-file:components/PlayerAccountGamingLimitsGroupEdit-CgYe74GU.cjs AI (source-diff): Minified Svelte component bundle; i18n strings visible in sample. ai
source-diff obfuscated-file:components/PlayerAccountGamingLimitsInfoCard-2huuyjT6.cjs AI (source-diff): Minified Svelte component bundle; i18n strings visible in sample. ai
source-diff obfuscated-file:components/PlayerAccountGamingLimitsPopup-BfXocrId.cjs AI (source-diff): Minified Svelte component bundle; i18n strings visible in sample. ai
source-diff obfuscated-file:components/PlayerAccountModal-OXK4ExMf.cjs AI (source-diff): Minified Svelte component bundle; modal logic visible in sample. ai
source-diff obfuscated-file:components/PlayerAccountGamingLimitsGroupEdit-DKVKH_8F.js AI (source-diff): Minified Svelte component bundle; i18n strings visible in sample. ai
source-diff obfuscated-file:components/PlayerAccountGamingLimitsGroupEdit-y8_MhEQL.js AI (source-diff): Minified Svelte component bundle; consistent with package pattern. ai
source-diff obfuscated-file:components/PlayerAccountGamingLimitsInfoCard-CEK2gvoQ.js AI (source-diff): Minified Svelte component bundle; consistent with package pattern. ai
semgrep semgrep:new-function-constructor AI (semgrep): Fires inside Vaadin dev-mode detection boilerplate; stable false positive for this component package. ai
bogus-package bogus-package AI (bogus-package): Scoped component library with 837 versions; missing metadata is a known pattern for this publisher, not a spam indicator. ai

Versions (showing 100 of 661)

Version Deps Published
1.28.4 3 / 15
1.28.3 3 / 15
1.28.2 3 / 15
1.28.1 3 / 15
1.28.0 3 / 15
1.27.10 3 / 15
1.27.8 3 / 15
1.27.7 3 / 15
1.27.6 3 / 15
1.27.5 3 / 15
1.27.3 3 / 15
1.27.2 3 / 15
1.27.0 3 / 15
1.26.0 3 / 15
1.25.0 3 / 15
1.24.7 3 / 15
1.24.6 3 / 15
1.24.4 3 / 15
1.24.1 3 / 15
1.24.0 3 / 15
1.23.1 3 / 15
1.23.0 3 / 15
1.22.11 3 / 15
1.22.10 3 / 15
1.22.9 3 / 15
1.22.8 3 / 15
1.22.7 3 / 15
1.22.0 4 / 15
1.20.11 4 / 15
1.20.10 4 / 15
1.20.9 4 / 15
1.20.8 4 / 15
1.20.7 4 / 15
1.20.6 4 / 15
1.20.5 4 / 15
1.20.4 4 / 15
1.20.3 4 / 15
1.20.2 4 / 15
1.20.1 4 / 15
1.20.0 4 / 15
1.19.6 4 / 15
1.19.5 4 / 15
1.19.3 4 / 15
1.19.2 4 / 15
1.19.1 4 / 15
1.18.0 4 / 15
1.17.5 4 / 15
1.17.4 4 / 15
1.17.3 4 / 15
1.17.2 4 / 15
1.17.1 4 / 15
1.17.0 4 / 15
1.16.2 4 / 15
1.16.1 4 / 15
1.16.0 4 / 15
1.15.7 4 / 15
1.15.6 4 / 15
1.15.4 4 / 15
1.15.2 4 / 15
1.15.1 4 / 15
1.15.0 4 / 15
1.14.8 4 / 15
1.14.7 4 / 15
1.14.6 4 / 15
1.14.5 4 / 15
1.14.4 4 / 15
1.14.3 4 / 15
1.14.2 4 / 15
1.14.1 4 / 15
1.14.0 4 / 15
1.13.24 4 / 15
1.13.23 4 / 15
1.13.22 4 / 15
1.13.21 4 / 15
1.13.20 4 / 15
1.13.19 4 / 15
1.13.18 4 / 15
1.13.17 4 / 15
1.13.16 4 / 15
1.13.15 4 / 15
1.13.14 4 / 15
1.13.13 4 / 15
1.13.12 4 / 15
1.13.11 4 / 15
1.13.10 4 / 15
1.13.9 4 / 15
1.13.8 4 / 15
1.13.7 4 / 15
1.13.6 4 / 15
1.13.5 4 / 15
1.13.4 4 / 15
1.13.3 4 / 15
1.13.2 4 / 15
1.13.1 4 / 15
1.13.0 4 / 15
1.12.7 4 / 15
1.12.6 4 / 15
1.12.5 4 / 15
1.12.4 4 / 15
1.12.3 4 / 15
Showing 100 of 661 Next page →

v1.28.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.28.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.28.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.28.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.28.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.27.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.27.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.27.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.27.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.27.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.27.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.27.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.27.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.26.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.25.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.24.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.24.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.24.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.24.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.24.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.23.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.23.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.22.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.22.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.22.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.22.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.22.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.22.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.20.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.19.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.19.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.19.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.19.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.19.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.18.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.17.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.17.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.17.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.17.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.17.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.17.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.16.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.16.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.16.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.15.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.15.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.15.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.15.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.15.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.15.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.14.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.14.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.14.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.14.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.14.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.14.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.14.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.14.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.14.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.24

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.23

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.22

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.21

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.20

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.19

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.18

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.17

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.16

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.15

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.13.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.12.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.12.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.12.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.12.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.12.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.