@openmrs/esm-patient-allergies-app
Patient allergies microfrontend for the OpenMRS SPA
10
Versions
MPL-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
mogoodrichopenmrs-botrkorytkowskidjazayerimksdbrandonesjdickbmamlindkibetdennisforthewinibacher
Keywords
openmrs
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/1789.js | AI (source-diff): Standard webpack bundle of react-i18next; minification is expected for this OpenMRS microfrontend. | ai | |
| source-diff | obfuscated-file:dist/2304.js | AI (source-diff): Standard webpack bundle of react-hook-form/zod resolver; minification expected. | ai | |
| source-diff | obfuscated-file:dist/2362.js | AI (source-diff): Standard webpack bundle of Carbon SVG icons; minification expected. | ai | |
| source-diff | obfuscated-file:dist/2544.js | AI (source-diff): Standard webpack bundle of openmrs-framework feature-flags + SWR; minification expected. | ai | |
| source-diff | net-exec-file:dist/2544.js | AI (source-diff): Network calls are SWR fetch logic; dynamic execution is localStorage feature-flag reads — no dropper pattern. | ai | |
| source-diff | obfuscated-file:dist/3739.js | AI (source-diff): Standard webpack bundle with CSS-in-JS; minification expected. | ai | |
| source-diff | obfuscated-file:dist/3989.js | AI (source-diff): Standard webpack bundle of SWR library; minification expected. | ai | |
| source-diff | obfuscated-file:dist/466.js | AI (source-diff): Standard webpack bundle of React; minification expected. | ai | |
| source-diff | obfuscated-file:dist/5697.js | AI (source-diff): Standard webpack bundle; minification expected for this OpenMRS microfrontend. | ai | |
| source-diff | obfuscated-file:dist/6846.js | AI (source-diff): Standard webpack bundle; minification expected. | ai | |
| source-diff | obfuscated-file:dist/7424.js | AI (source-diff): Standard webpack bundle; minification expected. | ai | |
| source-diff | obfuscated-file:dist/7646.js | AI (source-diff): Standard webpack bundle; minification expected. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large number of webpack chunks is normal for this microfrontend's build output. | ai | |
| phantom-deps | phantom-dep:lodash-es | AI (phantom-deps): lodash-es is declared as a runtime dependency in package.json; phantom-dep heuristic is a false positive here. | ai |
Versions (showing 10 of 10)
| Version | Deps | Published |
|---|---|---|
| 12.3.4 | 2 / 3 | |
| 12.3.3 | 2 / 3 | |
| 12.3.2 | 2 / 3 | |
| 12.3.1 | 2 / 3 | |
| 12.3.0 | 2 / 3 | |
| 12.2.1 | 2 / 3 | |
| 12.2.0 | 2 / 3 | |
| 12.1.0 | 2 / 2 | |
| 12.0.1 | 2 / 2 | |
| 12.0.0 | 2 / 2 |
v12.3.4
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.0.1
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v12.0.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.