← Home

@live-change/security-frontend

npm
100
Versions
BSD-3-Clause
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

m8

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
bogus-package bogus-package AI (bogus-package): Established monorepo package; missing metadata is stable pattern, not spam indicator. ai
npm-metadata no-description AI (npm-metadata): Internal package with empty description; stable for this package. ai
phantom-deps phantom-dep:serve-static AI (phantom-deps): Config-file reference; stable false positive for this package. ai
phantom-deps phantom-dep:@live-change/dao AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
phantom-deps phantom-dep:compression AI (phantom-deps): Config-file reference; stable false positive for this package. ai
phantom-deps phantom-dep:@live-change/dao-vue3 AI (phantom-deps): Same-org monorepo dep; stable false positive. ai
phantom-deps phantom-dep:rollup-plugin-visualizer AI (phantom-deps): Build config reference; stable false positive. ai
phantom-deps phantom-dep:serialize-javascript AI (phantom-deps): Config-file reference; stable false positive for this package. ai
phantom-deps phantom-dep:@vueuse/core AI (phantom-deps): Config-file reference; stable false positive for this frontend package. ai
phantom-deps phantom-dep:@live-change/user-service AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:@live-change/dao-websocket AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:@live-change/session-service AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:@live-change/vue3-components AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:@live-change/secret-code-service AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:primevue AI (phantom-deps): Frontend UI lib declared for config/build use; stable false positive for this package. ai
phantom-deps phantom-dep:@live-change/message-authentication-service AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:luxon AI (phantom-deps): Date lib declared for config/build; stable false positive. ai
phantom-deps phantom-dep:cross-env AI (phantom-deps): Used in npm scripts; stable false positive. ai
phantom-deps phantom-dep:primeicons AI (phantom-deps): Icon lib declared for config use; stable false positive. ai
phantom-deps phantom-dep:vue-router AI (phantom-deps): Frontend routing lib declared for config use; stable false positive. ai
phantom-deps phantom-dep:@live-change/secret-link-service AI (phantom-deps): Same-org dep; stable false positive. ai
phantom-deps phantom-dep:vue-meta AI (phantom-deps): Declared for config/build use; stable false positive. ai
phantom-deps phantom-dep:primeflex AI (phantom-deps): CSS utility lib declared for config/build use; stable false positive. ai
phantom-deps phantom-dep:get-port-sync AI (phantom-deps): Dev/server tooling dep; stable false positive. ai
phantom-deps phantom-dep:@live-change/cli AI (phantom-deps): Same-org CLI tool used in scripts; stable false positive. ai
phantom-deps phantom-dep:codeceptjs-assert AI (phantom-deps): Test tooling dep; stable false positive. ai
phantom-deps phantom-dep:vue3-scroll-border AI (phantom-deps): Frontend component declared for config use; stable false positive. ai
phantom-deps phantom-dep:@live-change/vue3-ssr AI (phantom-deps): Same-org dep used in build config; stable false positive. ai
phantom-deps phantom-dep:@live-change/framework AI (phantom-deps): Same-org dep; stable false positive. ai

Versions (showing 100 of 338)

Version Deps Published
0.9.216 28 / 8
0.9.215 28 / 8
0.9.214 28 / 8
0.9.213 28 / 8
0.9.212 28 / 8
0.9.209 28 / 8
0.9.208 28 / 8
0.9.207 28 / 8
0.9.206 28 / 8
0.9.205 28 / 8
0.9.204 28 / 8
0.9.203 28 / 8
0.9.201 28 / 8
0.9.200 28 / 8
0.9.199 28 / 8
0.9.198 28 / 8
0.9.197 28 / 8
0.9.196 28 / 8
0.9.195 28 / 8
0.9.194 28 / 8
0.9.193 28 / 8
0.9.192 28 / 8
0.9.191 28 / 8
0.9.190 28 / 8
0.9.189 28 / 8
0.9.188 28 / 8
0.9.187 28 / 8
0.9.186 28 / 8
0.9.185 28 / 8
0.9.184 28 / 8
0.9.183 28 / 8
0.9.182 28 / 8
0.9.181 28 / 8
0.9.180 28 / 8
0.9.179 28 / 8
0.9.177 28 / 8
0.9.176 28 / 8
0.9.175 28 / 8
0.9.174 28 / 8
0.9.173 28 / 8
0.9.171 28 / 8
0.9.169 28 / 8
0.9.167 28 / 8
0.9.166 28 / 8
0.9.165 28 / 8
0.9.164 28 / 8
0.9.163 28 / 8
0.9.162 28 / 8
0.9.161 28 / 8
0.9.160 28 / 8
0.9.159 28 / 8
0.9.158 28 / 8
0.9.157 28 / 8
0.9.156 28 / 8
0.9.155 28 / 8
0.9.154 28 / 8
0.9.153 28 / 8
0.9.152 28 / 8
0.9.151 28 / 8
0.9.150 28 / 8
0.9.149 28 / 8
0.9.148 28 / 8
0.9.147 28 / 8
0.9.146 28 / 8
0.9.145 28 / 8
0.9.144 28 / 8
0.9.143 28 / 8
0.9.142 28 / 8
0.9.141 28 / 8
0.9.140 28 / 8
0.9.139 28 / 8
0.9.138 28 / 8
0.9.137 28 / 8
0.9.136 28 / 8
0.9.135 28 / 8
0.9.134 28 / 8
0.9.133 28 / 8
0.9.132 28 / 8
0.9.131 28 / 8
0.9.130 28 / 8
0.9.129 28 / 8
0.9.128 28 / 8
0.9.127 28 / 8
0.9.126 28 / 8
0.9.125 28 / 8
0.9.124 28 / 8
0.9.123 28 / 8
0.9.122 28 / 8
0.9.121 28 / 8
0.9.120 28 / 8
0.9.119 28 / 8
0.9.118 28 / 8
0.9.117 28 / 8
0.9.116 28 / 8
0.9.115 28 / 8
0.9.114 28 / 8
0.9.113 28 / 8
0.9.112 28 / 8
0.9.111 28 / 8
0.9.110 28 / 8
Showing 100 of 338 Next page →

v0.9.216

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.215

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.214

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.213

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.9.212

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.