@flarehr/pba-benefits-admin
* `npm install`: Installs dependencies
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:goober | AI (phantom-deps): Referenced in babelMacros twin preset; required for build, not direct import. | ai | |
| phantom-deps | phantom-dep:preact | AI (phantom-deps): Build tool dependency; referenced in eslint config and build scripts. | ai | |
| phantom-deps | phantom-dep:preact-custom-element | AI (phantom-deps): Build tool dependency; referenced in devDeps and type definitions. | ai | |
| phantom-deps | phantom-dep:formik | AI (phantom-deps): Form library used implicitly; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): React DOM used implicitly; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:lucide-react | AI (phantom-deps): Icon library used implicitly in JSX; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:tailwind-merge | AI (phantom-deps): Utility used in config/runtime; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:clsx | AI (phantom-deps): Utility library used implicitly in JSX; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@vitejs/plugin-react | AI (phantom-deps): Vite plugin used in config; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@tanstack/react-table | AI (phantom-deps): Table library used implicitly; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:class-variance-authority | AI (phantom-deps): Utility used in config/runtime; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-dropdown-menu | AI (phantom-deps): UI component library used implicitly; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-slot | AI (phantom-deps): UI component library used implicitly; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:axios | AI (phantom-deps): HTTP client used in config/runtime; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): React used implicitly in JSX; stable pattern for this package. | ai |
Versions (showing 51 of 349)
| Version | Deps | Published |
|---|---|---|
| 1.0.1462 | 12 / 29 | |
| 1.0.1461 | 12 / 29 | |
| 1.0.1460 | 12 / 29 | |
| 1.0.1459 | 12 / 29 | |
| 1.0.1458 | 12 / 29 | |
| 1.0.1457 | 12 / 29 | |
| 1.0.1456 | 12 / 29 | |
| 1.0.1455 | 12 / 29 | |
| 1.0.1454 | 12 / 29 | |
| 1.0.1453 | 12 / 29 | |
| 1.0.1452 | 12 / 29 | |
| 1.0.1451 | 12 / 29 | |
| 1.0.1450 | 12 / 29 | |
| 1.0.1449 | 12 / 29 | |
| 1.0.1448 | 12 / 29 | |
| 1.0.1447 | 12 / 29 | |
| 1.0.1446 | 12 / 29 | |
| 1.0.1445 | 12 / 29 | |
| 1.0.1444 | 12 / 29 | |
| 1.0.1443 | 12 / 29 | |
| 1.0.1442 | 12 / 29 | |
| 1.0.1441 | 12 / 29 | |
| 1.0.1440 | 12 / 29 | |
| 1.0.1439 | 12 / 29 | |
| 1.0.1438 | 12 / 29 | |
| 1.0.1437 | 12 / 29 | |
| 1.0.1436 | 12 / 29 | |
| 1.0.1435 | 12 / 29 | |
| 1.0.1434 | 12 / 29 | |
| 1.0.1433 | 12 / 29 | |
| 1.0.1429 | 12 / 29 | |
| 1.0.1425 | 12 / 29 | |
| 1.0.1424 | 12 / 29 | |
| 1.0.1423 | 12 / 29 | |
| 1.0.1422 | 12 / 29 | |
| 1.0.1421 | 12 / 29 | |
| 1.0.1420 | 12 / 29 | |
| 1.0.1419 | 12 / 29 | |
| 1.0.1418 | 12 / 29 | |
| 1.0.1417 | 12 / 29 | |
| 1.0.1416 | 12 / 29 | |
| 1.0.1415 | 12 / 29 | |
| 1.0.1414 | 12 / 29 | |
| 1.0.1413 | 12 / 29 | |
| 1.0.1412 | 12 / 29 | |
| 1.0.1411 | 12 / 29 | |
| 1.0.1410 | 12 / 29 | |
| 1.0.1409 | 12 / 29 | |
| 1.0.1408 | 12 / 29 | |
| 1.0.1407 | 12 / 29 | |
| 1.0.1406 | 12 / 29 |
v1.0.1462
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1461
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1460
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1459
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1458
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1457
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1456
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1455
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1454
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1453
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1452
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1451
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1450
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1449
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1448
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1447
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1446
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1445
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1444
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1443
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1442
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1441
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1440
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1439
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1438
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1437
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1436
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1435
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1434
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1433
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1429
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1425
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1424
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1423
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1422
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1421
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1420
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1418
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1417
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1416
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1414
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1413
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1412
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1411
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1410
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1408
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1407
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1406
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.