← Home

@godaddy/react

npm Repository Homepage

The `createCheckoutSession` function creates a new checkout session with GoDaddy's commerce API.

19
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

jpageibrandaokinetifexrxmarbleskquerna3rdedenjcrugzzjgowdyswaagiejpina1-godaddymmason2sgore-godaddyrmarkinswcole1-godaddy

Keywords

tanstack-intent

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@radix-ui/react-avatar AI (dependencies): @radix-ui is a well-established, widely-trusted component library; stable false positive for this package. ai
source-diff obfuscated-file:dist/checkout-FEBVtlT0.js AI (source-diff): Standard Vite bundle with long lines from minification; imports are all known legitimate packages, no obfuscation payload. ai
source-diff obfuscated-file:dist/checkout-B7yB0DfE.js AI (source-diff): Standard Vite bundle with readable imports; long lines are minified but not obfuscated. Stable pattern for this build toolchain. ai
phantom-deps phantom-dep:embla-carousel-react AI (phantom-deps): UI carousel dep; config-referenced pattern for this component library. ai
phantom-deps phantom-dep:tailwindcss AI (phantom-deps): Build-time CSS tooling; referenced in config, not imported directly. ai
phantom-deps phantom-dep:@tailwindcss/cli AI (phantom-deps): Build-time tooling; referenced in config, not imported directly. ai
phantom-deps phantom-dep:@tailwindcss/vite AI (phantom-deps): Build-time tooling; referenced in config, not imported directly. ai
phantom-deps phantom-dep:@radix-ui/react-toast AI (phantom-deps): UI component library re-export pattern; stable for this package. ai
phantom-deps phantom-dep:@radix-ui/react-avatar AI (phantom-deps): UI component library re-export pattern; stable for this package. ai
phantom-deps phantom-dep:@radix-ui/react-switch AI (phantom-deps): UI component library re-export pattern; stable for this package. ai
phantom-deps phantom-dep:@radix-ui/react-toggle AI (phantom-deps): UI component library re-export pattern; stable for this package. ai
phantom-deps phantom-dep:react-resizable-panels AI (phantom-deps): UI component library re-export pattern; stable for this package. ai
phantom-deps phantom-dep:@radix-ui/react-tooltip AI (phantom-deps): UI component library re-export pattern; stable for this package. ai
phantom-deps phantom-dep:@radix-ui/react-alert-dialog AI (phantom-deps): UI component library re-export pattern; stable for this package. ai
phantom-deps phantom-dep:@radix-ui/react-aspect-ratio AI (phantom-deps): UI component library re-export pattern; stable for this package. ai
phantom-deps phantom-dep:@radix-ui/react-toggle-group AI (phantom-deps): UI component library re-export pattern; stable for this package. ai
phantom-deps phantom-dep:graphql AI (phantom-deps): Referenced in config files; stable pattern for this package. ai
phantom-deps phantom-dep:vaul AI (phantom-deps): UI component library; deps referenced in config/re-export patterns, not direct imports. ai
phantom-deps phantom-dep:@radix-ui/react-separator AI (phantom-deps): UI component library re-export pattern; stable for this package. ai

Versions (showing 19 of 19)

Version Deps Published
1.0.44 48 / 15
1.0.41 48 / 15
1.0.40 48 / 15
1.0.38 48 / 15
1.0.37 48 / 15
1.0.36 48 / 15
1.0.35 48 / 15
1.0.34 48 / 15
1.0.33 48 / 15
1.0.32 48 / 15
1.0.27 48 / 15
1.0.25 48 / 15
1.0.21 48 / 15
1.0.17 48 / 15
1.0.16 48 / 15
1.0.13 48 / 15
1.0.4 48 / 15
1.0.3 48 / 15
1.0.1 48 / 15

v1.0.44

2 findings
HIGH New obfuscated file: dist/checkout-FEBVtlT0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.41

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.40

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.37

2 findings
HIGH New obfuscated file: dist/checkout-B7yB0DfE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.36

2 findings
HIGH New obfuscated file: dist/checkout-B7yB0DfE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.35

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.34

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.33

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.32

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.27

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.25

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.21

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.17

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.16

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.