@openfin/web-notifications

Here™ Web Notification Center

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

openfincolinhuopenfinbrandonpierrebaizenoyangundaymichaelmcoatesalan15008imansurijohnmandia-openfinrdepenatgoc99wenjuncheharsimran.openfin.singhmichal-pichlinski-hereluiemiliolicui3936connormccaffertyopenfin-cichrishobsonexperoliangliu-hererichbrowne-openfinazizyokhzhi0209openfin-gavinoblargnewaz.sharifandy.westacottshahossaineugeneross-openfingouthamcopenfin-jeffsakibahmadmanamiuedaxyopenfinhannahmcmillensmocarskidavidcoxon-ofdhilan__tomasz__galim.kaudinovife-dev1gallak-openfineheyderelliott.burrmjoslingyoge-openfinhina-khalidcrom83eoyewobiyongji.chenmarek_openfinjmransegnolaameet-openfinrutu-bmichalzzopenfin-johansandrewche3openfin-ci-ghkraig-monarchworksuday.guntupalliahkjeffersongarcia25tpatek17cezary_openfinoliviatarsinicknewman-herericardo.martini-here.io

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
phantom-deps	phantom-dep:yup	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:react	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:formik	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:lodash	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:fuse.js	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:history	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:date-fns	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:reselect	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:inversify	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:react-dom	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:date-fns-tz	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:lodash.noop	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:markdown-it	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:react-redux	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:lodash.clamp	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:react-router	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:react-calendar	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:semver-compare	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29
phantom-deps	phantom-dep:@openfin/predux	AI (phantom-deps): Same-org scoped package; stable false positive for this bundled library.	ai	2026/04/29
phantom-deps	phantom-dep:lodash.throttle	AI (phantom-deps): Bundled component library; deps declared for consumers but not directly imported in dist output.	ai	2026/04/29