← Home

@fundamental-ngx/moment-adapter

npm Repository Homepage

Datetime adapter for SAP Fundamentals, based on Moment.js package

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

fundamental-ui

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:esm2022/lib/moment-datetime-adapter.mjs AI (source-diff): Standard Angular ESM2022 compiler output with long lines; not obfuscation. ai
source-diff obfuscated-file:esm2022/lib/moment-datetime.module.mjs AI (source-diff): Standard Angular ESM2022 compiler output with long lines; not obfuscation. ai
source-diff source-size-tripled AI (source-diff): Size increase reflects addition of ESM2022 build artifacts across a major version bump, not injected payload. ai
source-diff obfuscated-file:esm2020/lib/moment-datetime-adapter.mjs AI (source-diff): Angular ESM compiler output; long lines are standard for this build format, not obfuscation. ai
phantom-deps phantom-dep:tslib AI (phantom-deps): tslib is a declared runtime dependency used implicitly by Angular compiled output; stable false positive for this package. ai
bogus-package bogus-package AI (bogus-package): Established SAP Angular library; sparse README and no keywords are cosmetic issues, not spam indicators. ai

Versions (showing 51 of 235)

View all versions
Version Deps Published
0.64.0 1 / 0
0.63.1 1 / 0
0.63.0 1 / 0
0.62.4 1 / 0
0.62.3 1 / 0
0.62.2 1 / 0
0.62.1 1 / 0
0.62.0 1 / 0
0.61.7 1 / 0
0.61.6 1 / 0
0.61.5 1 / 0
0.61.4 1 / 0
0.61.3 1 / 0
0.61.2 1 / 0
0.61.1 1 / 0
0.58.10 1 / 0
0.58.9 1 / 0
0.58.8 1 / 0
0.58.7 1 / 0
0.58.6 1 / 0
0.58.5 1 / 0
0.58.4 1 / 0
0.58.3 1 / 0
0.57.10 1 / 0
0.57.9 1 / 0
0.57.8 1 / 0
0.57.7 1 / 0
0.57.6 1 / 0
0.57.5 1 / 0
0.57.4 1 / 0
0.57.3 1 / 0
0.57.2 1 / 0
0.57.1 1 / 0
0.57.0 1 / 0
0.56.9 1 / 0
0.56.8 1 / 0
0.56.7 1 / 0
0.56.6 1 / 0
0.56.5 1 / 0
0.56.4 1 / 0
0.56.3 1 / 0
0.56.2 1 / 0
0.56.1 1 / 0
0.56.0 1 / 0
0.55.10 1 / 0
0.55.9 1 / 0
0.55.8 1 / 0
0.55.7 1 / 0
0.55.6 1 / 0
0.55.5 1 / 0
0.55.4 1 / 0

v0.64.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.63.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.61.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.61.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.58.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.58.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.55.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.55.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.55.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.