@newrelic/rrdom
5
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
newrelic
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:jsdom | AI (typosquat): @newrelic/rrdom is a legitimate New Relic fork of rrweb's rrdom package (a virtual DOM), not a typosquat of jsdom. The @newrelic scope and GitHub repo confirm legitimacy. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): The fromBase64 utility is a standard DOM serialization helper in rrweb for decoding snapshot data. No malicious payload hiding; code is publicly visible and benign. | ai |