@flarehr/promoted-benefits-admin
Salpac FinOps Admin
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:preact | AI (phantom-deps): Runtime dep consumed via bundled output, not direct import; stable pattern for this Preact-based package. | ai | |
| phantom-deps | phantom-dep:@emotion/css | AI (phantom-deps): Emotion deps used via twin.macro/babel config; not directly imported in source. | ai | |
| phantom-deps | phantom-dep:framer-motion | AI (phantom-deps): Runtime dep bundled into dist; phantom-dep is a false positive for this package. | ai | |
| phantom-deps | phantom-dep:@emotion/cache | AI (phantom-deps): Emotion peer dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@emotion/react | AI (phantom-deps): Emotion peer dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@emotion/styled | AI (phantom-deps): Emotion peer dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:react-hook-form | AI (phantom-deps): Runtime dep bundled into dist; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@heroicons/react | AI (phantom-deps): Runtime dep bundled into dist; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:react-router-dom | AI (phantom-deps): Runtime dep bundled into dist; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@headlessui/react | AI (phantom-deps): Runtime dep bundled into dist; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@tanstack/react-query | AI (phantom-deps): Runtime dep bundled into dist; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:preact-custom-element | AI (phantom-deps): Runtime dep bundled into dist; stable false positive for this package. | ai |
Versions (showing 100 of 711)
| Version | Deps | Published |
|---|---|---|
| 1.4.39684 | 12 / 26 | |
| 1.4.39611 | 12 / 26 | |
| 1.4.39559 | 12 / 26 | |
| 1.4.39438 | 12 / 26 | |
| 1.4.39309 | 12 / 26 | |
| 1.4.39186 | 12 / 26 | |
| 1.4.39002 | 12 / 26 | |
| 1.4.38891 | 12 / 26 | |
| 1.4.38826 | 12 / 26 | |
| 1.4.38763 | 12 / 26 | |
| 1.4.38650 | 12 / 26 | |
| 1.4.38516 | 12 / 26 | |
| 1.4.38378 | 12 / 26 | |
| 1.4.38268 | 12 / 26 | |
| 1.4.38108 | 12 / 26 | |
| 1.4.38045 | 12 / 26 | |
| 1.4.37985 | 12 / 26 | |
| 1.4.37859 | 12 / 26 | |
| 1.4.37670 | 12 / 26 | |
| 1.4.37511 | 12 / 26 | |
| 1.4.37339 | 12 / 26 | |
| 1.4.37204 | 12 / 26 | |
| 1.4.37142 | 12 / 26 | |
| 1.4.37079 | 12 / 26 | |
| 1.4.36965 | 12 / 26 | |
| 1.4.36829 | 12 / 26 | |
| 1.4.36692 | 12 / 26 | |
| 1.4.36500 | 12 / 26 | |
| 1.4.36349 | 12 / 26 | |
| 1.4.36291 | 12 / 26 | |
| 1.4.36225 | 12 / 26 | |
| 1.4.36118 | 12 / 26 | |
| 1.4.35949 | 12 / 26 | |
| 1.4.35831 | 12 / 26 | |
| 1.4.35697 | 12 / 26 | |
| 1.4.35555 | 12 / 26 | |
| 1.4.35486 | 12 / 26 | |
| 1.4.35419 | 12 / 26 | |
| 1.4.35289 | 12 / 26 | |
| 1.4.35166 | 12 / 26 | |
| 1.4.35059 | 12 / 26 | |
| 1.4.34945 | 12 / 26 | |
| 1.4.34830 | 12 / 26 | |
| 1.4.34762 | 12 / 26 | |
| 1.4.34707 | 12 / 26 | |
| 1.4.34609 | 12 / 26 | |
| 1.4.34491 | 12 / 26 | |
| 1.4.34368 | 12 / 26 | |
| 1.4.34220 | 12 / 26 | |
| 1.4.34097 | 12 / 26 | |
| 1.4.34035 | 12 / 26 | |
| 1.4.33971 | 12 / 26 | |
| 1.4.33827 | 12 / 26 | |
| 1.4.33706 | 12 / 26 | |
| 1.4.33590 | 12 / 26 | |
| 1.4.33469 | 12 / 26 | |
| 1.4.33344 | 12 / 26 | |
| 1.4.33275 | 12 / 26 | |
| 1.4.33221 | 12 / 26 | |
| 1.4.33078 | 12 / 26 | |
| 1.4.32934 | 12 / 26 | |
| 1.4.32787 | 12 / 26 | |
| 1.4.23296 | 12 / 26 | |
| 1.4.23129 | 12 / 26 | |
| 1.4.23025 | 12 / 26 | |
| 1.4.22957 | 12 / 26 | |
| 1.4.22687 | 12 / 26 | |
| 1.4.22456 | 12 / 26 | |
| 1.4.22156 | 12 / 26 | |
| 1.4.21865 | 12 / 26 | |
| 1.4.21668 | 12 / 26 | |
| 1.4.21579 | 12 / 26 | |
| 1.4.21506 | 12 / 26 | |
| 1.4.21269 | 12 / 26 | |
| 1.4.21094 | 12 / 26 | |
| 1.4.20915 | 12 / 26 | |
| 1.4.20753 | 12 / 26 | |
| 1.4.20600 | 12 / 26 | |
| 1.4.20510 | 12 / 26 | |
| 1.4.20392 | 12 / 26 | |
| 1.4.20178 | 12 / 26 | |
| 1.4.20020 | 12 / 26 | |
| 1.4.19831 | 12 / 26 | |
| 1.4.19632 | 12 / 26 | |
| 1.4.19333 | 12 / 26 | |
| 1.4.19254 | 12 / 26 | |
| 1.4.19160 | 12 / 26 | |
| 1.4.18967 | 12 / 26 | |
| 1.4.18813 | 12 / 26 | |
| 1.4.18590 | 12 / 26 | |
| 1.4.18367 | 12 / 26 | |
| 1.4.18192 | 12 / 26 | |
| 1.4.18092 | 12 / 26 | |
| 1.4.18011 | 12 / 26 | |
| 1.4.17845 | 12 / 26 | |
| 1.4.17696 | 12 / 26 | |
| 1.4.17575 | 12 / 26 | |
| 1.4.17504 | 12 / 26 | |
| 1.4.17277 | 12 / 26 | |
| 1.4.17085 | 12 / 26 |
v1.4.23296
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.23129
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.23025
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.22957
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.22687
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.22456
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.22156
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.21865
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.21668
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.21579
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.21506
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.21269
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.21094
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.20915
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.20753
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.20600
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.20510
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.20392
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.20178
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.20020
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.19831
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.19632
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.19333
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.19254
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.19160
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.18967
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.18813
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.18590
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.18367
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.18192
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.