@newrelic/rrweb-snapshot

Supply chain provenance

Status for the latest visible version.

Maintainers

Keywords

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
semgrep	semgrep:base64-decode	AI (semgrep): The fromBase64 function is a transparent string conversion utility (Buffer.from/atob) used in rrweb's DOM serialization. No eval, no network calls — stable false positive for this package.	ai	2026/04/26
phantom-deps	phantom-dep:postcss	AI (phantom-deps): postcss is a declared runtime dependency; phantom-dep flag is a packaging concern, not a security risk for this package.	ai	2026/04/26

Version	Deps	Published
1.1.2	1 / 12	2026-06-09
1.1.1	1 / 12	2026-05-20
1.1.0	1 / 12	2026-03-25
1.0.1	1 / 12	2025-10-13
1.0.0	1 / 12	2025-10-12