@genesislcap/foundation-shell
Genesis Foundation Shell
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/main.a86036ac3429d14a431b.js | AI (source-diff): Standard webpack bundle output for this Genesis shell package; consistent with prior versions. | ai | |
| source-diff | obfuscated-file:dist/main.c856f0e207ca039b1020.js | AI (source-diff): Standard webpack bundle output for this Genesis shell package; consistent with prior versions. | ai | |
| source-diff | obfuscated-file:dist/npm.microsoft.4c8d41dd0aa1785e09d5.js | AI (source-diff): Standard webpack bundle (FAST/Microsoft web components); consistent with this package's known dependencies. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): Monorepo CI pipeline publishes all packages simultaneously; rapid publish is expected for this org. | ai | |
| source-diff | obfuscated-file:dist/main.d02320089aa26d048dcb.js | AI (source-diff): Standard webpack bundle with CSS-in-JS; minification is expected for this build pipeline. | ai | |
| source-diff | obfuscated-file:dist/main.0e8ca22628a117f16a5f.js | AI (source-diff): Standard webpack bundle output for this Genesis shell package; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/npm.consola.00ba577c5cd42994a359.js | AI (source-diff): Minified consola logger bundle; recognizable library code, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/npm.microsoft.9b7cca951db576bc267c.js | AI (source-diff): Minified Microsoft FAST component bundle; standard webpack output for this package. | ai |
Versions (showing 51 of 922)
| Version | Deps | Published |
|---|---|---|
| 14.486.1 | 11 / 7 | |
| 14.486.0 | 11 / 7 | |
| 14.485.0 | 11 / 7 | |
| 14.484.2 | 11 / 7 | |
| 14.484.1 | 11 / 7 | |
| 14.484.0 | 11 / 7 | |
| 14.483.2 | 11 / 7 | |
| 14.483.1 | 11 / 7 | |
| 14.483.0 | 11 / 7 | |
| 14.482.1 | 11 / 7 | |
| 14.482.0 | 11 / 7 | |
| 14.481.1 | 11 / 7 | |
| 14.481.0 | 11 / 7 | |
| 14.480.0 | 11 / 7 | |
| 14.479.0 | 11 / 7 | |
| 14.478.0 | 11 / 7 | |
| 14.477.0 | 11 / 7 | |
| 14.476.0 | 11 / 7 | |
| 14.475.0 | 11 / 7 | |
| 14.474.1 | 11 / 7 | |
| 14.474.0 | 11 / 7 | |
| 14.473.0 | 11 / 7 | |
| 14.472.2 | 11 / 7 | |
| 14.472.1 | 11 / 7 | |
| 14.472.0 | 11 / 7 | |
| 14.471.0 | 11 / 7 | |
| 14.470.0 | 11 / 7 | |
| 14.469.0 | 11 / 7 | |
| 14.468.0 | 11 / 7 | |
| 14.467.2 | 11 / 7 | |
| 14.467.1 | 11 / 7 | |
| 14.467.0 | 11 / 7 | |
| 14.466.0 | 11 / 7 | |
| 14.465.0 | 11 / 7 | |
| 14.464.0 | 11 / 7 | |
| 14.463.0 | 11 / 7 | |
| 14.462.0 | 11 / 7 | |
| 14.461.2 | 11 / 7 | |
| 14.461.1 | 11 / 7 | |
| 14.461.0 | 11 / 7 | |
| 14.460.0 | 11 / 7 | |
| 14.459.0 | 11 / 7 | |
| 14.458.3 | 11 / 7 | |
| 14.458.2 | 11 / 7 | |
| 14.458.1 | 11 / 7 | |
| 14.458.0 | 11 / 7 | |
| 14.457.1 | 11 / 7 | |
| 14.457.0 | 11 / 7 | |
| 14.456.2 | 11 / 7 | |
| 14.456.1 | 11 / 7 | |
| 14.456.0 | 11 / 7 |
v14.486.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.486.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.485.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.484.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.484.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.484.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.483.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.483.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.483.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.482.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.482.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.481.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.481.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.480.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.479.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.478.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.477.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.476.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.475.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.474.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.474.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.473.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.472.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v14.472.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.