@onecx/angular-remote-components
This library was generated with [Nx](https://nx.dev).
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher is GitHub Actions CI/CD with SLSA provenance attestation; this is the expected publisher for this org's automated releases. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established library in the onecx ecosystem; sparse README and no keywords are cosmetic issues, not spam indicators. | ai | |
| source-diff | obfuscated-file:esm2022/mocks/slot-service-mock.mjs | AI (source-diff): Long lines are base64 sourceMappingURL in standard Angular ESM2022 build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/slot/slot.component.mjs | AI (source-diff): Long lines are base64 sourceMappingURL in standard Angular ESM2022 build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/services/permission.service.mjs | AI (source-diff): Long lines are base64 sourceMappingURL in standard Angular ESM2022 build output, not obfuscation. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase matches new Angular ESM2022 compiled files being added; no injected payload evidence. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known Angular/TypeScript runtime implicit dependency; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:esm2022/lib/services/slot.service.mjs | AI (source-diff): Long lines are base64 sourceMappingURL in standard Angular ESM2022 build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/utils/provide-translate-service-for-root.utils.mjs | AI (source-diff): Long lines are base64 sourceMappingURL in standard Angular ESM2022 build output, not obfuscation. | ai |
Versions (showing 51 of 95)
| Version | Deps | Published |
|---|---|---|
| 8.10.0 | 1 / 0 | |
| 8.9.0 | 1 / 0 | |
| 8.8.0 | 1 / 0 | |
| 8.7.0 | 1 / 0 | |
| 8.6.1 | 1 / 0 | |
| 8.6.0 | 1 / 0 | |
| 8.5.0 | 1 / 0 | |
| 8.4.2 | 1 / 0 | |
| 8.4.1 | 1 / 0 | |
| 8.4.0 | 1 / 0 | |
| 8.3.1 | 1 / 0 | |
| 8.3.0 | 1 / 0 | |
| 8.2.2 | 1 / 0 | |
| 8.2.1 | 1 / 0 | |
| 8.2.0 | 1 / 0 | |
| 8.1.1 | 1 / 0 | |
| 8.1.0 | 1 / 0 | |
| 8.0.0 | 1 / 0 | |
| 7.12.0 | 1 / 0 | |
| 7.11.0 | 1 / 0 | |
| 7.10.0 | 1 / 0 | |
| 7.9.2 | 1 / 0 | |
| 7.9.1 | 1 / 0 | |
| 7.9.0 | 1 / 0 | |
| 7.8.0 | 1 / 0 | |
| 7.7.2 | 1 / 0 | |
| 7.7.1 | 1 / 0 | |
| 7.6.1 | 1 / 0 | |
| 7.6.0 | 1 / 0 | |
| 7.5.0 | 1 / 0 | |
| 7.4.0 | 1 / 0 | |
| 7.3.0 | 1 / 0 | |
| 7.2.0 | 1 / 0 | |
| 7.1.0 | 1 / 0 | |
| 7.0.6 | 1 / 0 | |
| 7.0.5 | 1 / 0 | |
| 7.0.4 | 1 / 0 | |
| 7.0.3 | 1 / 0 | |
| 7.0.2 | 1 / 0 | |
| 7.0.1 | 1 / 0 | |
| 7.0.0 | 1 / 0 | |
| 6.27.1 | 1 / 0 | |
| 6.27.0 | 1 / 0 | |
| 6.26.0 | 1 / 0 | |
| 6.25.0 | 1 / 0 | |
| 6.24.1 | 1 / 0 | |
| 6.24.0 | 1 / 0 | |
| 6.23.2 | 1 / 0 | |
| 6.23.1 | 1 / 0 | |
| 6.23.0 | 1 / 0 | |
| 6.22.1 | 1 / 0 |
v8.10.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v8.9.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v7.12.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.27.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.27.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.