@openmrs/esm-patient-notes-app
Patient notes microfrontend for the OpenMRS SPA
9
Versions
MPL-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
mogoodrichopenmrs-botrkorytkowskidjazayerimksdbrandonesjdickbmamlindkibetdennisforthewinibacher
Keywords
openmrs
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/1789.js | AI (source-diff): Standard webpack bundle chunk; samples show i18next/React code, not malware. | ai | |
| source-diff | obfuscated-file:dist/1871.js | AI (source-diff): Standard webpack bundle chunk; samples show CSS-in-JS and OpenMRS styles. | ai | |
| source-diff | obfuscated-file:dist/2153.js | AI (source-diff): Standard webpack bundle chunk; samples show html-entities library code. | ai | |
| source-diff | obfuscated-file:dist/2544.js | AI (source-diff): Standard webpack bundle chunk; samples show feature-flags and OpenMRS framework code. | ai | |
| source-diff | obfuscated-file:dist/2824.js | AI (source-diff): Standard webpack bundle chunk; samples show React component code. | ai | |
| source-diff | obfuscated-file:dist/2842.js | AI (source-diff): Standard webpack bundle chunk; samples show CSS-in-JS and SCSS source maps. | ai | |
| source-diff | obfuscated-file:dist/3989.js | AI (source-diff): Standard webpack bundle chunk; samples show SWR library code. | ai | |
| source-diff | obfuscated-file:dist/466.js | AI (source-diff): Standard webpack bundle chunk; samples show React core library code. | ai | |
| source-diff | obfuscated-file:dist/5697.js | AI (source-diff): Standard webpack bundle chunk for this OpenMRS microfrontend. | ai | |
| source-diff | obfuscated-file:dist/5861.js | AI (source-diff): Standard webpack bundle chunk for this OpenMRS microfrontend. | ai | |
| source-diff | obfuscated-file:dist/7103.js | AI (source-diff): Standard webpack bundle chunk for this OpenMRS microfrontend. | ai | |
| source-diff | obfuscated-file:dist/7205.js | AI (source-diff): Standard webpack bundle chunk for this OpenMRS microfrontend. | ai | |
| source-diff | net-exec-file:dist/7205.js | AI (source-diff): False positive; webpack bundle's dynamic require + fetch patterns are not dropper malware. | ai | |
| source-diff | obfuscated-file:dist/7646.js | AI (source-diff): Standard webpack bundle chunk for this OpenMRS microfrontend. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large number of dist chunks is expected for a webpack-built microfrontend with new dependencies. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): html-entities is a well-known benign library; addition is consistent with package purpose. | ai |
Versions (showing 9 of 9)
| Version | Deps | Published |
|---|---|---|
| 12.3.4 | 2 / 3 | |
| 12.3.3 | 2 / 3 | |
| 12.3.2 | 2 / 3 | |
| 12.3.1 | 2 / 3 | |
| 12.3.0 | 2 / 3 | |
| 12.2.1 | 1 / 3 | |
| 12.2.0 | 1 / 3 | |
| 12.1.0 | 1 / 2 | |
| 12.0.0 | 1 / 2 |
v12.0.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.