← Home

@jbrowse/plugin-trix

JBrowse 2 trix text search adapter

24
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

garrettjstevensrbuelscmdcolin

Keywords

jbrowsejbrowse2

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): Trusted publisher with long track record; missing gitHead is a CI config change, not a security risk for this package. ai
dependencies unvetted-dep:@jbrowse/core AI (dependencies): First-party JBrowse ecosystem dependency; stable false positive for all @jbrowse/* packages. ai
phantom-deps phantom-dep:@mui/material AI (phantom-deps): Listed as a real runtime dependency in package.json; stable false positive for this monorepo plugin. ai
phantom-deps phantom-dep:mobx AI (phantom-deps): Listed as a real runtime dependency in package.json; stable false positive for this monorepo plugin. ai
phantom-deps phantom-dep:mobx-state-tree AI (phantom-deps): Listed as a real runtime dependency in package.json; stable false positive for this monorepo plugin. ai
phantom-deps phantom-dep:mobx-react AI (phantom-deps): Listed as a real runtime dependency in package.json; stable false positive for this monorepo plugin. ai
provenance no-provenance AI (provenance): Established JBrowse monorepo package; absence of provenance is consistent across all versions and not a risk indicator here. ai

Versions (showing 24 of 24)

Version Deps Published
4.3.0 2 / 0
4.2.1 2 / 0
4.2.0 2 / 0
4.1.15 2 / 0
4.1.14 2 / 0
4.1.13 2 / 0
4.1.12 2 / 0
4.1.11 2 / 0
4.1.10 2 / 0
4.1.9 2 / 0
4.1.8 2 / 0
4.1.7 2 / 0
4.1.6 2 / 0
4.1.5 2 / 0
4.1.4 2 / 0
4.1.3 2 / 0
4.1.1 2 / 0
4.1.0 2 / 0
4.0.4 2 / 0
4.0.3 2 / 0
4.0.2 2 / 0
4.0.1 2 / 0
4.0.0 2 / 0
3.7.0 6 / 0