@flarehr/superhero-salpac-profile-admin MIT 23 versions

@flarehr/superhero-salpac-profile-admin

npm

Flare Superhero Profile Admin

23

Versions

MIT

License

No

Install Scripts

Missing

Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

kyryll-flarehriain.fergusoningerweinberger74boris.etingof.flareflare.buildvitaly.brusentsevrubindershanganesan

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
phantom-deps	phantom-dep:preact	AI (phantom-deps): Bundled Preact app; deps consumed via Vite build, not direct imports. Stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:jwt-decode	AI (phantom-deps): Runtime dep bundled via Vite; phantom-dep heuristic is a stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:@emotion/css	AI (phantom-deps): Emotion CSS bundled via Vite/twin.macro; stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:react-router	AI (phantom-deps): Bundled via Vite; stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:@emotion/cache	AI (phantom-deps): Emotion dep bundled via Vite; stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:@emotion/react	AI (phantom-deps): Emotion dep bundled via Vite; stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:@emotion/styled	AI (phantom-deps): Emotion dep bundled via Vite; stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:@heroicons/react	AI (phantom-deps): Bundled via Vite; stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:@headlessui/react	AI (phantom-deps): Bundled via Vite; stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:@tanstack/react-query	AI (phantom-deps): Bundled via Vite; stable FP for this package.	ai	2026/04/29
phantom-deps	phantom-dep:preact-custom-element	AI (phantom-deps): Bundled via Vite; stable FP for this package.	ai	2026/04/29

Versions (showing 23 of 432)

Version	Deps	Published
1.0.868	11 / 26	2025-05-24
1.0.867	11 / 26	2025-05-23
1.0.866	11 / 26	2025-05-22
1.0.865	11 / 26	2025-05-21
1.0.864	11 / 26	2025-05-20
1.0.863	11 / 26	2025-05-19
1.0.862	11 / 26	2025-05-18
1.0.861	11 / 26	2025-05-17
1.0.860	11 / 26	2025-05-16
1.0.859	11 / 26	2025-05-15
1.0.858	11 / 26	2025-05-14
1.0.857	11 / 26	2025-05-13
1.0.856	11 / 26	2025-05-12
1.0.855	11 / 26	2025-05-11
1.0.854	11 / 26	2025-05-10
1.0.853	11 / 26	2025-05-09
1.0.852	11 / 26	2025-05-08
1.0.851	11 / 26	2025-05-08
1.0.850	11 / 26	2025-05-07
1.0.849	11 / 26	2025-05-06
1.0.848	11 / 26	2025-05-05
1.0.847	11 / 26	2025-05-04
1.0.842	11 / 26	2025-05-01

v1.0.868

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.867

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.866

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.865

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.864

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.863

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.862

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.861

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.860

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.859

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.858

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.857

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.856

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.855

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.854

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.853

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.852

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.851

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.850

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.849

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.848

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.847

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.842

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.