@memberjunction/ng-actions
MemberJunction Action Runner - Reusable components for testing and running actions with no Kendo dependencies
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/lib/action-param-dialog/action-param-dialog.component.js | AI (source-diff): Angular ngc compiler output; long lines are template function artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/action-test-harness/action-test-harness.component.js | AI (source-diff): Angular ngc compiler output; long lines are template function artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/action-test-harness-dialog/action-test-harness-dialog.component.js | AI (source-diff): Angular ngc compiler output; long lines are template function artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/action-result-code-dialog/action-result-code-dialog.component.js | AI (source-diff): Angular ngc compiler output; long lines are template function artifacts, not obfuscation. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publisher is confirmed by SLSA provenance attestation; consistent with org-wide CI/CD adoption. | ai | |
| phantom-deps | phantom-dep:rxjs | AI (phantom-deps): rxjs is a peer/framework dep referenced in Angular config; not directly imported by convention. | ai | |
| phantom-deps | phantom-dep:@memberjunction/graphql-dataprovider | AI (phantom-deps): Same-org scoped package; indirect usage expected in MemberJunction monorepo. | ai | |
| phantom-deps | phantom-dep:@angular/platform-browser | AI (phantom-deps): Framework-scoped Angular package loaded by convention, not direct import. | ai | |
| phantom-deps | phantom-dep:@memberjunction/global | AI (phantom-deps): Same-org scoped package; indirect usage is expected in MemberJunction monorepo. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit TypeScript runtime dependency. | ai |
Versions (showing 51 of 66)
| Version | Deps | Published |
|---|---|---|
| 5.48.0 | 9 / 4 | |
| 5.47.0 | 9 / 4 | |
| 5.46.0 | 9 / 4 | |
| 5.45.1 | 9 / 4 | |
| 5.45.0 | 9 / 4 | |
| 5.44.0 | 9 / 4 | |
| 5.43.0 | 8 / 3 | |
| 5.42.0 | 8 / 3 | |
| 5.41.0 | 8 / 3 | |
| 5.40.2 | 8 / 3 | |
| 5.40.1 | 8 / 3 | |
| 5.40.0 | 8 / 3 | |
| 5.39.0 | 8 / 3 | |
| 5.38.0 | 8 / 3 | |
| 5.37.0 | 8 / 3 | |
| 5.36.0 | 8 / 3 | |
| 5.35.0 | 8 / 3 | |
| 5.34.1 | 8 / 3 | |
| 5.34.0 | 8 / 3 | |
| 5.33.0 | 8 / 3 | |
| 5.32.0 | 8 / 3 | |
| 5.31.0 | 8 / 3 | |
| 5.30.1 | 7 / 3 | |
| 5.30.0 | 7 / 3 | |
| 5.29.0 | 7 / 3 | |
| 5.28.0 | 7 / 3 | |
| 5.27.1 | 7 / 3 | |
| 5.27.0 | 7 / 3 | |
| 5.26.0 | 7 / 3 | |
| 5.25.0 | 7 / 3 | |
| 5.24.0 | 7 / 3 | |
| 5.23.0 | 7 / 3 | |
| 5.22.0 | 7 / 3 | |
| 5.21.0 | 7 / 3 | |
| 5.20.0 | 7 / 3 | |
| 5.19.0 | 7 / 3 | |
| 5.18.0 | 7 / 3 | |
| 5.17.0 | 7 / 3 | |
| 5.16.0 | 7 / 3 | |
| 5.15.0 | 7 / 3 | |
| 5.14.0 | 7 / 3 | |
| 5.13.0 | 7 / 3 | |
| 5.12.0 | 7 / 3 | |
| 5.11.0 | 7 / 3 | |
| 5.10.1 | 7 / 3 | |
| 5.10.0 | 7 / 3 | |
| 5.9.0 | 7 / 3 | |
| 5.8.0 | 7 / 3 | |
| 5.7.0 | 7 / 3 | |
| 5.6.0 | 7 / 3 | |
| 5.5.0 | 7 / 3 |
v5.48.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.47.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.46.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.45.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.45.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.44.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.