@memberjunction/credentials
MemberJunction: Credential Engine - secure credential management with caching, encryption, and audit logging.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publisher is consistent with MemberJunction monorepo automation; SLSA attestation confirms integrity. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): All new deps are same-org @memberjunction/* packages at matching version, consistent with monorepo versioning. | ai | |
| phantom-deps | phantom-dep:@memberjunction/global | AI (phantom-deps): Same-org package; likely used transitively or in config. Stable false positive for this monorepo package. | ai | |
| phantom-deps | phantom-dep:rxjs | AI (phantom-deps): rxjs is a declared runtime dependency; phantom-dep fires because it's not directly imported in analyzed files, not because it's missing. | ai |
Versions (showing 51 of 78)
| Version | Deps | Published |
|---|---|---|
| 5.49.0 | 6 / 5 | |
| 5.48.0 | 6 / 5 | |
| 5.47.0 | 6 / 5 | |
| 5.46.0 | 6 / 5 | |
| 5.45.1 | 6 / 5 | |
| 5.45.0 | 6 / 5 | |
| 5.44.0 | 6 / 5 | |
| 5.43.0 | 6 / 5 | |
| 5.42.0 | 6 / 5 | |
| 5.41.0 | 6 / 5 | |
| 5.40.2 | 6 / 5 | |
| 5.40.1 | 6 / 5 | |
| 5.40.0 | 6 / 5 | |
| 5.39.0 | 6 / 5 | |
| 5.38.0 | 6 / 5 | |
| 5.37.0 | 6 / 5 | |
| 5.36.0 | 6 / 5 | |
| 5.35.0 | 6 / 5 | |
| 5.34.1 | 6 / 5 | |
| 5.34.0 | 6 / 5 | |
| 5.33.0 | 6 / 5 | |
| 5.32.0 | 6 / 5 | |
| 5.31.0 | 6 / 5 | |
| 5.30.1 | 6 / 5 | |
| 5.30.0 | 6 / 5 | |
| 5.29.0 | 6 / 5 | |
| 5.28.0 | 6 / 5 | |
| 5.27.1 | 6 / 5 | |
| 5.27.0 | 6 / 5 | |
| 5.26.0 | 6 / 5 | |
| 5.25.0 | 6 / 5 | |
| 5.24.0 | 6 / 5 | |
| 5.23.0 | 6 / 5 | |
| 5.22.0 | 6 / 5 | |
| 5.21.0 | 6 / 5 | |
| 5.20.0 | 6 / 5 | |
| 5.19.0 | 6 / 5 | |
| 5.18.0 | 6 / 5 | |
| 5.17.0 | 6 / 5 | |
| 5.16.0 | 6 / 5 | |
| 5.15.0 | 6 / 5 | |
| 5.14.0 | 6 / 5 | |
| 5.13.0 | 6 / 5 | |
| 5.12.0 | 6 / 5 | |
| 5.11.0 | 6 / 5 | |
| 5.10.1 | 6 / 5 | |
| 5.10.0 | 6 / 5 | |
| 5.9.0 | 6 / 5 | |
| 5.8.0 | 6 / 5 | |
| 5.7.0 | 6 / 5 | |
| 5.6.0 | 6 / 5 |
v5.49.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.48.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.47.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.46.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.45.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.45.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.44.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.