@memberjunction/ng-conversations
MemberJunction: Conversation, Collection, and Artifact management components for any Angular application
51
Versions
ISC
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
craig.adam.bcethan-bcjordanfanapourms-bccaeleb.balanesiianzygmuntanag123hiltongrpranavrao-bcsdesai-bcjosue-garcia-bcrkihm-bc
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@memberjunction/ng-composer | AI (dependencies): Same-org monorepo sibling, versioned in lockstep. | ai | |
| phantom-deps | phantom-dep:@memberjunction/interactive-component-types | AI (phantom-deps): Same-org type-only package, common false positive. | ai | |
| dependencies | unvetted-dep:@memberjunction/ng-user-routines | AI (dependencies): Same-org monorepo sibling, versioned in lockstep. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/media/realtime-media-surface.component.js | AI (source-diff): Same Angular ngc compiled output pattern; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/evidence-playback/realtime-evidence-playback.component.js | AI (source-diff): Standard Angular ngc compiler output with ɵɵ-prefixed instructions; long lines are template function inlining, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/realtime-delegation-card.component.js | AI (source-diff): Angular ngc compiler output; long lines are template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/realtime-session-overlay.component.js | AI (source-diff): Angular ngc compiler output; long lines are template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/realtime-session-thread.component.js | AI (source-diff): Angular ngc compiler output; long lines are template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/realtime-activity-rail.component.js | AI (source-diff): Angular ngc compiler output; long lines are template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/realtime-agent-banner.component.js | AI (source-diff): Angular ngc compiler output; long lines are template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/realtime-agent-picker.component.js | AI (source-diff): Angular ngc compiler output; long lines are template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/realtime-composer.component.js | AI (source-diff): Angular ngc compiler output; long lines are template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/realtime/realtime-session-timeline-card.component.js | AI (source-diff): Angular ngc compiler output; long lines are template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/dialogs/rating-dialog.component.js | AI (source-diff): Angular ngc compiler output; long lines are template instruction sequences, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/lib/components/overlay/chat-overlay.component.js | AI (source-diff): Angular AOT compiler output with long template lines; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/attachment/image-viewer.component.js | AI (source-diff): Angular ngc compiler output; long lines are ɵɵ instruction sequences, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/message/form-question.component.js | AI (source-diff): Standard Angular ngc compiled output; long lines are template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/components/message/agent-response-form.component.js | AI (source-diff): Standard Angular ngc compiled output; long lines are template factory functions, not obfuscation. | ai | |
| phantom-deps | phantom-dep:marked | AI (phantom-deps): marked is a transitive dep of ngx-markdown; not directly imported but legitimately declared. | ai | |
| source-diff | obfuscated-file:dist/lib/components/mention/mention-editor.component.js | AI (source-diff): Angular ngc compiled output; long lines are generated template factories, not obfuscation. | ai | |
| phantom-deps | phantom-dep:@memberjunction/global | AI (phantom-deps): Same-org package; likely used transitively or via re-exports within the MemberJunction monorepo. | ai | |
| phantom-deps | phantom-dep:@memberjunction/ai | AI (phantom-deps): Same-org dependency used indirectly via other MJ packages; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit Angular/TypeScript runtime dependency; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@angular/cdk | AI (phantom-deps): Angular CDK is a framework-scoped package loaded by convention; stable false positive for this Angular component library. | ai |
Versions (showing 51 of 93)
| Version | Deps | Published |
|---|---|---|
| 5.48.0 | 33 / 4 | |
| 5.47.0 | 33 / 4 | |
| 5.46.0 | 33 / 4 | |
| 5.45.1 | 33 / 4 | |
| 5.45.0 | 33 / 4 | |
| 5.44.0 | 31 / 4 | |
| 5.43.0 | 29 / 4 | |
| 5.42.0 | 29 / 4 | |
| 5.41.0 | 29 / 4 | |
| 5.40.2 | 26 / 4 | |
| 5.40.1 | 26 / 4 | |
| 5.40.0 | 26 / 4 | |
| 5.39.0 | 26 / 4 | |
| 5.38.0 | 26 / 4 | |
| 5.37.0 | 25 / 4 | |
| 5.36.0 | 25 / 4 | |
| 5.35.0 | 25 / 4 | |
| 5.34.1 | 25 / 4 | |
| 5.34.0 | 25 / 4 | |
| 5.33.0 | 25 / 4 | |
| 5.32.0 | 25 / 4 | |
| 5.31.0 | 25 / 4 | |
| 5.30.1 | 25 / 4 | |
| 5.30.0 | 25 / 4 | |
| 5.29.0 | 24 / 4 | |
| 5.28.0 | 24 / 4 | |
| 5.27.1 | 24 / 4 | |
| 5.27.0 | 24 / 4 | |
| 5.26.0 | 24 / 4 | |
| 5.25.0 | 24 / 4 | |
| 5.24.0 | 24 / 4 | |
| 5.23.0 | 24 / 4 | |
| 5.22.0 | 30 / 4 | |
| 5.21.0 | 30 / 4 | |
| 5.20.0 | 30 / 4 | |
| 5.19.0 | 30 / 4 | |
| 5.18.0 | 30 / 4 | |
| 5.17.0 | 30 / 4 | |
| 5.16.0 | 30 / 4 | |
| 5.15.0 | 30 / 4 | |
| 5.14.0 | 30 / 4 | |
| 5.13.0 | 30 / 4 | |
| 5.12.0 | 30 / 4 | |
| 5.11.0 | 29 / 4 | |
| 5.10.1 | 29 / 4 | |
| 5.10.0 | 29 / 4 | |
| 5.9.0 | 29 / 4 | |
| 5.8.0 | 29 / 4 | |
| 5.7.0 | 29 / 4 | |
| 5.6.0 | 29 / 4 | |
| 5.5.0 | 29 / 4 |
v5.48.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.47.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.46.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.45.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.45.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.44.0
3 findings
HIGH
New obfuscated file: dist/lib/components/realtime/evidence-playback/realtime-evidence-playback.component.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/lib/components/realtime/media/realtime-media-surface.component.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.