@galacean/effects-plugin-alipay-downgrade
Galacean Effects player downgrade plugin for Alipay
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
yiqiimchenjianchengkong.zxxeyworldwideyinjieruimeng.sugl3336563zhanyingweizhuxudongjohanzhumrkou47husongluzhuangjujiegujinyue1010feyabibi
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| email-domain | unclaimed-email:yufangjun.com | AI (email-domain): Galacean/Ant Group org package with long history; email domain risk is low given established publisher track record. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): Added @galacean/effects at matching version 1.6.10 — same-org host library dependency, expected for a plugin package. | ai | |
| provenance | no-provenance | AI (provenance): Large Ant Group monorepo package; no provenance is consistent across all 250 versions. | ai |
Versions (showing 51 of 81)
| Version | Deps | Published |
|---|---|---|
| 2.9.3 | 0 / 1 | |
| 2.9.2 | 0 / 1 | |
| 2.9.1 | 0 / 1 | |
| 2.9.0 | 0 / 1 | |
| 2.8.12 | 0 / 1 | |
| 2.8.11 | 0 / 1 | |
| 2.8.10 | 0 / 1 | |
| 2.8.9 | 0 / 1 | |
| 2.8.8 | 0 / 1 | |
| 2.8.7 | 0 / 1 | |
| 2.8.6 | 0 / 1 | |
| 2.8.5 | 0 / 1 | |
| 2.8.4 | 0 / 1 | |
| 2.8.3 | 0 / 1 | |
| 2.8.2 | 0 / 1 | |
| 2.8.1 | 0 / 1 | |
| 2.8.0 | 0 / 1 | |
| 2.7.5 | 0 / 1 | |
| 2.7.4 | 0 / 1 | |
| 2.7.3 | 0 / 1 | |
| 2.7.2 | 0 / 1 | |
| 2.7.1 | 0 / 1 | |
| 2.7.0 | 0 / 1 | |
| 2.6.9 | 0 / 1 | |
| 2.6.8 | 0 / 1 | |
| 2.6.7 | 0 / 1 | |
| 2.6.6 | 0 / 1 | |
| 2.6.5 | 0 / 1 | |
| 2.6.4 | 0 / 1 | |
| 2.6.3 | 0 / 1 | |
| 2.6.2 | 0 / 1 | |
| 2.6.1 | 0 / 1 | |
| 2.6.0 | 0 / 1 | |
| 2.5.6 | 0 / 1 | |
| 2.5.5 | 0 / 1 | |
| 2.5.4 | 0 / 1 | |
| 2.5.3 | 0 / 1 | |
| 2.5.2 | 0 / 1 | |
| 2.5.1 | 0 / 1 | |
| 2.5.0 | 0 / 1 | |
| 2.4.8 | 0 / 1 | |
| 2.4.7 | 0 / 1 | |
| 2.4.6 | 0 / 1 | |
| 2.4.5 | 0 / 1 | |
| 2.4.4 | 0 / 1 | |
| 2.4.3 | 0 / 1 | |
| 2.4.2 | 0 / 1 | |
| 2.4.1 | 0 / 1 | |
| 2.4.0 | 0 / 1 | |
| 2.3.8 | 0 / 1 | |
| 2.3.7 | 0 / 1 |
v2.9.3
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.