@flarehr/superhero-fasttrack-middleware
Flare Superhero FastTrack Middleware Component
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| bogus-package | bogus-package | AI (bogus-package): Internal monorepo component from trusted publisher, not spam. | ai | |
| source-diff | source-size-dropped | AI (source-diff): Tiny/near-empty package by design; not a malicious stub swap. | ai | |
| phantom-deps | phantom-dep:preact-custom-element | AI (phantom-deps): Bundled webpack build; dep used in compiled dist, not scannable source imports. | ai | |
| phantom-deps | phantom-dep:preact | AI (phantom-deps): Bundled webpack build; preact used in compiled dist, not scannable source imports. | ai | |
| source-diff | net-exec-file-transition:dist/superhero-fasttrack-middleware.js | AI (source-diff): Webpack bundle output from legit dep swap (preact->react), no malicious payload in sample. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): use-sync-external-store is a well-known, widely-used React ecosystem package. | ai | |
| phantom-deps | phantom-dep:use-sync-external-store | AI (phantom-deps): React state utility dep referenced in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:react-to-webcomponent | AI (phantom-deps): Referenced in config; stable false positive for this webcomponent wrapper package. | ai | |
| phantom-deps | phantom-dep:@headlessui/react | AI (phantom-deps): UI component dep referenced in config; phantom-dep false positive for this package. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): react-dom is a peer dep referenced in config; stable false positive for this component library. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): React is a peer dep referenced in config files; not directly imported in library code is expected. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): dotnet tool restore is standard Fable/F# toolchain setup; consistent with the package's documented build pipeline across all versions. | ai |
Versions (showing 51 of 1884)
| Version | Deps | Published |
|---|---|---|
| 2.12.0 | 5 / 6 | |
| 2.11.0 | 5 / 6 | |
| 2.10.0 | 5 / 6 | |
| 2.9.0 | 5 / 6 | |
| 2.8.0 | 5 / 6 | |
| 0.1.2547 | 5 / 6 | |
| 0.1.2545 | 5 / 6 | |
| 0.1.2544 | 5 / 6 | |
| 0.1.2543 | 5 / 6 | |
| 0.1.2542 | 5 / 6 | |
| 0.1.2541 | 5 / 6 | |
| 0.1.2539 | 5 / 6 | |
| 0.1.2538 | 5 / 6 | |
| 0.1.2537 | 5 / 6 | |
| 0.1.2536 | 5 / 6 | |
| 0.1.2535 | 5 / 6 | |
| 0.1.2533 | 5 / 6 | |
| 0.1.2532 | 5 / 6 | |
| 0.1.2525 | 5 / 6 | |
| 0.1.2524 | 5 / 6 | |
| 0.1.2523 | 5 / 6 | |
| 0.1.2521 | 5 / 6 | |
| 0.1.2520 | 5 / 6 | |
| 0.1.2519 | 5 / 6 | |
| 0.1.2518 | 5 / 6 | |
| 0.1.2516 | 5 / 6 | |
| 0.1.2515 | 5 / 6 | |
| 0.1.2508 | 5 / 6 | |
| 0.1.2507 | 5 / 6 | |
| 0.1.2505 | 5 / 6 | |
| 0.1.2504 | 5 / 6 | |
| 0.1.2503 | 5 / 6 | |
| 0.1.2500 | 5 / 6 | |
| 0.1.2495 | 5 / 6 | |
| 0.1.2494 | 5 / 6 | |
| 0.1.2493 | 5 / 6 | |
| 0.1.2489 | 5 / 6 | |
| 0.1.2486 | 5 / 6 | |
| 0.1.2485 | 5 / 6 | |
| 0.1.2483 | 5 / 6 | |
| 0.1.2481 | 5 / 6 | |
| 0.1.2478 | 5 / 6 | |
| 0.1.2477 | 5 / 6 | |
| 0.1.2476 | 5 / 6 | |
| 0.1.2474 | 5 / 6 | |
| 0.1.2471 | 5 / 6 | |
| 0.1.2470 | 5 / 6 | |
| 0.1.2469 | 5 / 6 | |
| 0.1.2464 | 5 / 6 | |
| 0.1.2463 | 5 / 6 | |
| 0.1.2461 | 5 / 6 |
v2.12.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.11.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.10.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.9.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.8.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2547
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2545
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2544
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2543
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2542
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2541
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2539
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2538
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2537
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2536
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2535
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2533
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2532
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2525
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2524
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2523
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2521
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2520
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2519
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2518
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2516
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2515
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2508
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2507
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2505
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2504
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2503
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2500
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2495
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2494
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2493
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2489
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2486
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2485
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2483
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2481
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2478
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2477
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2476
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2474
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2471
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2469
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2464
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.2461
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.