@flarehr/benefits-plan-assessment
In index.html update values for `profile-id`, `assessment-id` and `access-token`.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): All new deps are well-known, widely-used frontend libraries. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): High-frequency internal release cadence is normal for this publisher's package family. | ai | |
| provenance | no-provenance | AI (provenance): Unchanged from prior approved sibling; not a regression. | ai | |
| dependencies | unvetted-dep:@fortawesome/pro-solid-svg-icons | AI (dependencies): Legitimate FontAwesome pro package, standard commercial icon library. | ai | |
| phantom-deps | phantom-dep:@fontsource/inter | AI (phantom-deps): CSS/font import referenced via config, not a direct import; benign. | ai | |
| dependencies | unvetted-dep:@fortawesome/pro-regular-svg-icons | AI (dependencies): Well-known FontAwesome pro icon pack, standard for UI components. | ai | |
| phantom-deps | phantom-dep:@headlessui/react | AI (phantom-deps): UI library referenced via config; benign pattern for this package. | ai | |
| phantom-deps | phantom-dep:react-router-dom | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:@tanstack/react-query | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:preact-custom-element | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:react-transition-group | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:clsx | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:@fortawesome/react-fontawesome | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:@fortawesome/pro-solid-svg-icons | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:@fortawesome/fontawesome-svg-core | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:@fortawesome/pro-regular-svg-icons | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:@contentful/rich-text-types | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:axios | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:preact | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:dompurify | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:downshift | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:use-debounce | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai | |
| phantom-deps | phantom-dep:react-hook-form | AI (phantom-deps): Bundled component library; deps declared for consumer resolution, not direct imports in source. | ai |
Versions (showing 51 of 97)
| Version | Deps | Published |
|---|---|---|
| 1.0.984 | 16 / 24 | |
| 1.0.913 | 16 / 24 | |
| 1.0.861 | 16 / 24 | |
| 1.0.856 | 16 / 24 | |
| 1.0.855 | 16 / 24 | |
| 1.0.850 | 16 / 24 | |
| 1.0.842 | 16 / 24 | |
| 1.0.817 | 16 / 24 | |
| 1.0.816 | 16 / 24 | |
| 1.0.815 | 16 / 24 | |
| 1.0.808 | 16 / 24 | |
| 1.0.800 | 16 / 24 | |
| 1.0.796 | 16 / 24 | |
| 1.0.794 | 16 / 24 | |
| 1.0.793 | 16 / 24 | |
| 1.0.751 | 16 / 24 | |
| 1.0.745 | 16 / 24 | |
| 1.0.744 | 16 / 24 | |
| 1.0.724 | 16 / 24 | |
| 1.0.723 | 16 / 24 | |
| 1.0.720 | 16 / 24 | |
| 1.0.718 | 16 / 24 | |
| 1.0.715 | 16 / 24 | |
| 1.0.713 | 16 / 24 | |
| 1.0.711 | 16 / 24 | |
| 1.0.710 | 16 / 24 | |
| 1.0.708 | 16 / 24 | |
| 1.0.706 | 16 / 24 | |
| 1.0.704 | 16 / 24 | |
| 1.0.697 | 16 / 24 | |
| 1.0.691 | 16 / 24 | |
| 1.0.689 | 16 / 24 | |
| 1.0.688 | 16 / 24 | |
| 1.0.682 | 16 / 24 | |
| 1.0.675 | 16 / 24 | |
| 1.0.672 | 16 / 24 | |
| 1.0.671 | 16 / 24 | |
| 1.0.668 | 16 / 24 | |
| 1.0.665 | 16 / 24 | |
| 1.0.664 | 16 / 24 | |
| 1.0.661 | 16 / 24 | |
| 1.0.657 | 16 / 24 | |
| 1.0.655 | 16 / 24 | |
| 1.0.652 | 16 / 24 | |
| 1.0.529 | 16 / 24 | |
| 1.0.527 | 16 / 24 | |
| 1.0.526 | 16 / 24 | |
| 1.0.525 | 16 / 24 | |
| 1.0.457 | 14 / 24 | |
| 1.0.422 | 14 / 24 | |
| 1.0.409 | 14 / 24 |
v1.0.984
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.817
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.816
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.815
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.808
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.800
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.796
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.794
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.793
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.751
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.745
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.724
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.723
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.718
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.715
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.713
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.711
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.710
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.706
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.697
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.691
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.689
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.688
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.682
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.675
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.671
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.665
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.664
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.652
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.457
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.409
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.