@memberjunction/ng-explorer-core
MemberJunction Explorer: Core Angular Components
51
Versions
ISC
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
craig.adam.bcethan-bcjordanfanapourms-bccaeleb.balanesiianzygmuntanag123hiltongrpranavrao-bcsdesai-bcjosue-garcia-bcrkihm-bc
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@memberjunction/ng-composer | AI (dependencies): Same-org monorepo sibling pinned to identical version; not third-party. | ai | |
| source-diff | obfuscated-file:dist/lib/resource-wrappers/livekit-room-resource.component.js | AI (source-diff): Angular AOT-compiled component output, not obfuscation; long lines are template codegen. | ai | |
| dependencies | unvetted-dep:@memberjunction/ng-mj-livekit-room | AI (dependencies): First-party same-org MemberJunction package, version-locked to monorepo release. | ai | |
| source-diff | obfuscated-file:dist/lib/conversation-feedback/conversation-feedback.js | AI (source-diff): Angular ngc compiler output; long lines are template functions, not obfuscation. Stable pattern for this package. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New deps are same-org @memberjunction packages pinned to matching version; consistent monorepo release pattern. | ai | |
| source-diff | obfuscated-file:dist/lib/profile/profile-dialog.component.js | AI (source-diff): Standard Angular ngc compiler output with long lines; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/about/about-dialog.component.js | AI (source-diff): Standard Angular ngc compiler output with long lines; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/resource-wrappers/chat-conversations-resource.component.js | AI (source-diff): Angular Ivy compiled output; long lines are template functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/oauth/oauth-callback.component.js | AI (source-diff): Angular AOT compiled template output; long lines are standard ɵɵ instruction sequences, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/shell/components/header/app-nav.component.js | AI (source-diff): Angular AOT compiled template output; long lines are standard ɵɵ instruction sequences, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/command-palette/command-palette.component.js | AI (source-diff): Angular AOT compiled template output; long lines are standard ɵɵ instruction sequences, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/shell/components/dialogs/app-access-dialog.component.js | AI (source-diff): Angular ngc compiled output; long lines are Ivy template factory functions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/lib/shell/components/header/app-switcher.component.js | AI (source-diff): Angular ngc compiled output; long lines are template factory functions, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/lib/shell/components/tabs/tab-container.component.js | AI (source-diff): Angular ngc compiled output; long lines are template factory functions, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/lib/shell/shell.component.js | AI (source-diff): Angular ngc compiled output; long lines are template factory functions, not obfuscation. Stable pattern for this package. | ai | |
| dependencies | unvetted-dep:@memberjunction/ng-explorer-settings | AI (dependencies): Same-org monorepo sibling; versioned lockstep with this package. | ai | |
| dependencies | unvetted-dep:@memberjunction/ng-shared | AI (dependencies): Same-org monorepo sibling; versioned lockstep with this package. | ai | |
| dependencies | unvetted-dep:@memberjunction/ng-base-forms | AI (dependencies): Same-org monorepo sibling; versioned lockstep with this package. | ai | |
| dependencies | unvetted-dep:@memberjunction/ng-query-viewer | AI (dependencies): Same-org monorepo sibling; versioned lockstep with this package. | ai | |
| dependencies | unvetted-dep:@memberjunction/ng-conversations | AI (dependencies): Same-org monorepo sibling; versioned lockstep with this package. | ai | |
| dependencies | unvetted-dep:@memberjunction/ng-ai-test-harness | AI (dependencies): Same-org monorepo sibling; versioned lockstep with this package. | ai | |
| dependencies | unvetted-dep:@memberjunction/ng-dashboard-viewer | AI (dependencies): Same-org monorepo sibling; versioned lockstep with this package. | ai | |
| dependencies | unvetted-dep:golden-layout | AI (dependencies): Established open-source layout library; phantom-dep finding indicates it's referenced in config, not a supply-chain risk. | ai | |
| phantom-deps | phantom-dep:@memberjunction/graphql-dataprovider | AI (phantom-deps): Same-org sibling; likely used indirectly via Angular DI or re-exported — stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a standard TypeScript runtime implicit dep; stable false positive for Angular libraries. | ai | |
| phantom-deps | phantom-dep:@memberjunction/entity-communications-client | AI (phantom-deps): Same-org monorepo dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@memberjunction/ng-entity-permissions | AI (phantom-deps): Same-org monorepo dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@memberjunction/templates-base-types | AI (phantom-deps): Same-org monorepo dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@memberjunction/communication-types | AI (phantom-deps): Same-org monorepo dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@memberjunction/ng-record-tags | AI (phantom-deps): Same-org monorepo dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@memberjunction/export-engine | AI (phantom-deps): Same-org monorepo dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@memberjunction/ai-core-plus | AI (phantom-deps): Same-org monorepo dep; phantom-dep heuristic unreliable for Angular module re-exports. | ai | |
| phantom-deps | phantom-dep:@angular/platform-browser | AI (phantom-deps): Framework-scoped Angular package loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@auth0/auth0-angular | AI (phantom-deps): Referenced in config files per analyzer note; Angular module injection pattern. | ai | |
| phantom-deps | phantom-dep:golden-layout | AI (phantom-deps): Referenced in config files per analyzer note; Angular lazy-loading pattern, not a direct import. | ai |
Versions (showing 51 of 92)
| Version | Deps | Published |
|---|---|---|
| 5.47.0 | 55 / 3 | |
| 5.46.0 | 55 / 3 | |
| 5.45.1 | 55 / 3 | |
| 5.45.0 | 55 / 3 | |
| 5.44.0 | 53 / 3 | |
| 5.43.0 | 53 / 3 | |
| 5.42.0 | 53 / 3 | |
| 5.41.0 | 52 / 3 | |
| 5.40.2 | 52 / 3 | |
| 5.40.1 | 52 / 3 | |
| 5.40.0 | 52 / 3 | |
| 5.39.0 | 52 / 3 | |
| 5.38.0 | 52 / 3 | |
| 5.37.0 | 51 / 3 | |
| 5.36.0 | 50 / 3 | |
| 5.35.0 | 48 / 3 | |
| 5.34.1 | 48 / 3 | |
| 5.34.0 | 48 / 3 | |
| 5.33.0 | 48 / 3 | |
| 5.32.0 | 48 / 3 | |
| 5.31.0 | 48 / 3 | |
| 5.30.1 | 47 / 3 | |
| 5.30.0 | 47 / 3 | |
| 5.29.0 | 47 / 3 | |
| 5.28.0 | 46 / 3 | |
| 5.27.1 | 46 / 3 | |
| 5.27.0 | 46 / 3 | |
| 5.26.0 | 45 / 3 | |
| 5.25.0 | 45 / 3 | |
| 5.24.0 | 43 / 3 | |
| 5.23.0 | 42 / 3 | |
| 5.22.0 | 52 / 3 | |
| 5.21.0 | 52 / 3 | |
| 5.20.0 | 52 / 3 | |
| 5.19.0 | 52 / 3 | |
| 5.18.0 | 52 / 3 | |
| 5.17.0 | 52 / 3 | |
| 5.16.0 | 52 / 3 | |
| 5.15.0 | 52 / 3 | |
| 5.14.0 | 52 / 3 | |
| 5.13.0 | 52 / 3 | |
| 5.12.0 | 52 / 3 | |
| 5.11.0 | 52 / 3 | |
| 5.10.1 | 52 / 3 | |
| 5.10.0 | 52 / 3 | |
| 5.9.0 | 52 / 3 | |
| 5.8.0 | 52 / 3 | |
| 5.7.0 | 52 / 3 | |
| 5.6.0 | 52 / 3 | |
| 5.5.0 | 52 / 3 | |
| 5.4.1 | 52 / 3 |
v5.47.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.46.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.45.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.45.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.44.0
2 findings
HIGH
New obfuscated file: dist/lib/resource-wrappers/livekit-room-resource.component.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.