← Home

@memberjunction/testing-engine-base

MemberJunction Testing Framework Engine Base - Metadata cache for test types, suites, and tests (UI-safe, no execution)

51
Versions
ISC
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

craig.adam.bcethan-bcjordanfanapourms-bccaeleb.balanesiianzygmuntanag123hiltongrpranavrao-bcsdesai-bcjosue-garcia-bcrkihm-bc

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions CI with SLSA attestation is a supply chain improvement, not a risk. ai
phantom-deps phantom-dep:@memberjunction/global AI (phantom-deps): Same org scope; likely used transitively or in config/type declarations rather than direct imports. ai
phantom-deps phantom-dep:rxjs AI (phantom-deps): rxjs declared as runtime dep in package.json; phantom-dep heuristic false positive for this package. ai
phantom-deps phantom-dep:debug AI (phantom-deps): debug declared as runtime dep in package.json; phantom-dep heuristic false positive for this package. ai

Versions (showing 51 of 89)

View all versions
Version Deps Published
5.48.0 5 / 3
5.47.0 5 / 3
5.46.0 5 / 3
5.45.1 5 / 3
5.45.0 5 / 3
5.44.0 5 / 3
5.43.0 5 / 3
5.42.0 5 / 3
5.41.0 5 / 3
5.40.2 5 / 3
5.40.1 5 / 3
5.40.0 5 / 3
5.39.0 5 / 3
5.38.0 5 / 3
5.37.0 5 / 3
5.36.0 5 / 3
5.35.0 5 / 3
5.34.1 5 / 3
5.34.0 5 / 3
5.33.0 5 / 3
5.32.0 5 / 3
5.31.0 5 / 3
5.30.1 5 / 3
5.30.0 5 / 3
5.29.0 5 / 3
5.28.0 5 / 3
5.27.1 5 / 3
5.27.0 5 / 3
5.26.0 5 / 3
5.25.0 5 / 3
5.24.0 5 / 3
5.23.0 5 / 3
5.22.0 5 / 3
5.21.0 5 / 3
5.20.0 5 / 3
5.19.0 5 / 3
5.18.0 5 / 3
5.17.0 5 / 3
5.16.0 5 / 3
5.15.0 5 / 3
5.14.0 5 / 3
5.13.0 5 / 3
5.12.0 5 / 3
5.11.0 5 / 3
5.10.1 5 / 3
5.10.0 5 / 3
5.9.0 5 / 3
5.8.0 5 / 3
5.7.0 5 / 3
5.6.0 5 / 3
5.5.0 5 / 3

v5.48.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.47.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.46.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.45.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.45.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.44.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.