← Home

@pisell/private-materials

pisell前端使用的私有物料

100
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

wang_hanzsj1037797769zhiwei.wangyaoxiaojialarry_ranhejunxiangfeng.xueah-scjinglin.tan

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff bulk-obfuscated-files:build AI (source-diff): Routine minified webpack build-output dump under build/. ai
source-diff obfuscated-file:lib/components/venueBooking/temp.js AI (source-diff): esbuild/tsdown bundler banner, not true obfuscation; new UI component build output. ai
source-diff obfuscated-file:es/plus/piPayment/sdk/flows/spi/tyro.js AI (source-diff): Babel-transpiled build output, not obfuscation. ai
source-diff obfuscated-file:es/plus/saleDetail/components/Client/ClientSelector.js AI (source-diff): Same babel-compiled artifact pattern. ai
source-diff obfuscated-file:es/plus/piPayment/sdk/providers/spi/tyro/client.js AI (source-diff): Babel/webpack build output, not true obfuscation. ai
source-diff obfuscated-file:es/plus/piPayment/sdk/providers/spi/tyro/flow.js AI (source-diff): Babel/webpack build output, not true obfuscation. ai
source-diff obfuscated-file:es/plus/piPayment/sdk/core/client.js AI (source-diff): Babel/webpack build output, not true obfuscation. ai
source-diff obfuscated-file:es/components/booking/utils/holderAssignmentConfirmModal.js AI (source-diff): Babel-transpiled build output in es/ dist, not true obfuscation. ai
source-diff obfuscated-file:es/components/checkout/components/PaymentResultToast/PaymentResultToastProvider.js AI (source-diff): Babel-transpiled build output in es/ dist, not true obfuscation. ai
source-diff bulk-obfuscated-files:lib AI (source-diff): esbuild-bundled CJS output, standard build artifact. ai
source-diff bulk-obfuscated-files:es AI (source-diff): Bundled build output (babel/regenerator helpers), not true obfuscation. ai
source-diff obfuscated-file:es/components/sharedSecondaryBigSale/SharedSecondaryBigSaleReceiver.js AI (source-diff): Same transpiled-output pattern, not obfuscation. ai
source-diff obfuscated-file:es/plus/saleDetail/actions/index.js AI (source-diff): Babel-transpiled long-line ES output, not real obfuscation. ai
source-diff obfuscated-file:es/plus/pisellReservation/floorMap/floorPlanApi.js AI (source-diff): Babel/regenerator transpiled build output, not true obfuscation. ai
source-diff obfuscated-file:es/plus/pisellReservation/serve/formResourcePage.js AI (source-diff): Babel/regenerator transpiled build output, not true obfuscation. ai
source-diff obfuscated-file-transition:es/components/appointmentBooking/components/Form/index.js AI (source-diff): Babel/father build inlines helper boilerplate past 3000-char threshold; transpiled output not obfuscation. Recurs every release. ai
source-diff obfuscated-file-transition:es/components/appointmentBooking/utils.js AI (source-diff): Babel/father build inlines regeneratorRuntime/helpers past line threshold; transpiled output not obfuscation. Recurs every release. ai
source-diff obfuscated-file:es/plus/saleDetail/components/Voucher/components/DiscountCardHolderModal.js AI (source-diff): Babel-bundled component code, not true obfuscation; no malicious behavior found. ai
source-diff obfuscated-file:es/plus/saleDetail/components/Voucher/DiscountCardHolderContext.js AI (source-diff): Babel-bundled component code, not true obfuscation; no malicious behavior found. ai
source-diff obfuscated-file:es/plus/piPayment/sdk/routes/walletpass/adapter.js AI (source-diff): Babel-transpiled bundle output, not obfuscation. ai
source-diff obfuscated-file:es/plus/piPayment/sdk/routes/eftpos/adapter.js AI (source-diff): Babel-transpiled bundle output, not obfuscation. ai
source-diff obfuscated-file:es/plus/orderList/components/BatchActionBar.js AI (source-diff): Babel-transpiled bundle output, not true obfuscation. ai
source-diff obfuscated-file:es/plus/saleDetail/hooks/useAdjustTimeModal.js AI (source-diff): Babel helper output, standard transpiled bundle artifact. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/modules/deviceConnections/components/ConnectExistingDeviceModal.js AI (source-diff): Babel-transpiled component code, not true obfuscation; matches package's build pipeline. ai
source-diff obfuscated-file:es/plus/salesSdk/bookingEditService/BookingEditHolderField.js AI (source-diff): Babel-transpiled bundle output, not true obfuscation. ai
source-diff obfuscated-file:build/lowcode/render/default/async/view.js AI (source-diff): Bundled webpack chunk, same build artifact as sibling file. ai
source-diff obfuscated-file:build/lowcode/async/view.js AI (source-diff): Bundled webpack chunk containing AWS SDK code, not obfuscation. ai
publish-pattern suspicious-version-number AI (publish-pattern): Long-running internal versioning scheme, not spoofing. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/components/DeviceDetailDrawer/hooks/useDeviceConnections.js AI (source-diff): Babel-compiled long-line output, not true obfuscation; no malicious payload. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/components/DeviceDetailDrawer/components/DeviceConnectionsPanel.js AI (source-diff): Babel-compiled long-line output, not true obfuscation; no malicious payload. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/components/DeviceDetailDrawer/components/ConnectExistingDeviceModal.js AI (source-diff): Babel-compiled long-line output, not true obfuscation; no malicious payload. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/hooks/useDeviceList.js AI (source-diff): Babel-compiled long-line output, not true obfuscation; no malicious payload. ai
source-diff obfuscated-file:build/lowcode/14.js AI (source-diff): Webpack-bundled chunk, not true obfuscation; matches build/lowcode output pattern. ai
phantom-deps phantom-dep:use-sync-external-store AI (phantom-deps): Unused declared dep typical of this large shared-materials package. ai
source-diff obfuscated-file:build/lowcode/render/default/12.js AI (source-diff): Webpack-bundled chunk, not true obfuscation; matches build/lowcode output pattern. ai
source-diff obfuscated-file:es/plus/saleDetail/hooks/useSaleDetailActions.js AI (source-diff): Babel-compiled build output, not true obfuscation. ai
source-diff obfuscated-file:es/components/pay/toC/PaymentMethods/components/MiniProgramWaitingPaymentModal/serve.js AI (source-diff): Babel-transpiled es/ build output, not true obfuscation. ai
source-diff obfuscated-file:es/hooks/useCartProductStockCheck.js AI (source-diff): Babel-transpiled es/ build output, not true obfuscation. ai
source-diff obfuscated-file:es/components/venueBooking/components/Voucher/index.js AI (source-diff): Babel-transpiled build output, not true obfuscation. ai
source-diff obfuscated-file:es/components/scanOrder/components/Menu/index.js AI (source-diff): Babel-transpiled build output (regeneratorRuntime helpers), not true obfuscation. ai
source-diff obfuscated-file:es/components/scanOrder/components/Voucher/index.js AI (source-diff): Babel-transpiled build output, not true obfuscation. ai
source-diff obfuscated-file:es/components/venueBooking/components/Addons/index.js AI (source-diff): Babel-transpiled build output, not true obfuscation. ai
source-diff obfuscated-file:es/components/venueBooking/components/Cart/index.js AI (source-diff): Babel-transpiled build output, not true obfuscation. ai
source-diff obfuscated-file:es/components/venueBooking/components/Checkout/index.js AI (source-diff): Babel-transpiled build output, not true obfuscation. ai
source-diff obfuscated-file:es/components/venueBooking/components/Content/index.js AI (source-diff): Sample shows readable JSX component source, not obfuscated. ai
source-diff obfuscated-file:es/components/venueBooking/components/VenueSelection/index.js AI (source-diff): Babel-transpiled build output, not true obfuscation. ai
source-diff obfuscated-file:build/lowcode/3.js AI (source-diff): Webpack bundle chunk, minified build output not obfuscation. ai
source-diff obfuscated-file:es/components/checkout/PaymentPlugin.js AI (source-diff): Babel-compiled helper code, standard build output. ai
source-diff obfuscated-file:build/lowcode/render/default/1.js AI (source-diff): Webpack bundle chunk, minified build output not obfuscation. ai
phantom-deps phantom-dep:decimal.js AI (phantom-deps): Same pattern across this org's component packages. ai
phantom-deps phantom-dep:@pisell/icon AI (phantom-deps): Same org scope, config-referenced dependency. ai
phantom-deps phantom-dep:@pisell/utils AI (phantom-deps): Same org scope, config-referenced dependency. ai
phantom-deps phantom-dep:@ant-design/icons AI (phantom-deps): Same pattern across this org's component packages. ai
phantom-deps phantom-dep:@react-spring/web AI (phantom-deps): Same pattern across this org's component packages. ai
phantom-deps phantom-dep:@use-gesture/react AI (phantom-deps): Same pattern across this org's component packages. ai
phantom-deps phantom-dep:antd AI (phantom-deps): Lowcode materials package; deps used via config/schema not direct import. ai
phantom-deps phantom-dep:dayjs AI (phantom-deps): Same pattern across this org's component packages. ai
phantom-deps phantom-dep:ahooks AI (phantom-deps): Same pattern across this org's component packages. ai
phantom-deps phantom-dep:classnames AI (phantom-deps): Same pattern across this org's component packages. ai
source-diff large-new-source-files AI (source-diff): Component library legitimately adds many compiled files per release. ai
source-diff obfuscated-file:es/plus/saasDevice/appPeripheral/hooks/usePeripheralSetupFlow.js AI (source-diff): Babel-transpiled build output, not obfuscation; standard for this lib's es/ dist. ai
source-diff obfuscated-file:es/plus/saasDevice/appPeripheral/services/peripheralDiscoveryService.js AI (source-diff): Babel-transpiled build output, not obfuscation; standard for this lib's es/ dist. ai
bogus-package bogus-package AI (bogus-package): Internal component library naming/README style, established publisher. ai
source-diff obfuscated-file:es/components/booking/components/reloadResourceModal/index.js AI (source-diff): Standard Babel/regenerator compiled output; not malicious obfuscation. Consistent with this package's build pipeline. ai
source-diff obfuscated-file:es/components/booking/info2/cartClientCard/index.js AI (source-diff): Standard Babel/regenerator compiled output; not malicious obfuscation. Consistent with this package's build pipeline. ai
source-diff obfuscated-file:es/components/pay/toC/PaymentMethods/components/MiniProgramWaitingPaymentModal/index.js AI (source-diff): Standard Babel transpiled output with regenerator-runtime; not obfuscation. ai
source-diff obfuscated-file:es/components/scanOrder/components/Content/index.js AI (source-diff): Standard Babel transpiled output with regenerator-runtime; not obfuscation. ai
source-diff obfuscated-file:es/components/scanOrder/components/Check/index.js AI (source-diff): Standard Babel transpiled output with regenerator-runtime; not obfuscation. ai
source-diff obfuscated-file:es/components/scanOrder/components/Cart/index.js AI (source-diff): Standard Babel transpiled output with regenerator-runtime; not obfuscation. ai
source-diff obfuscated-file:lib/plus/salesSdk/adjustTime/components/AdjustTimeActionList.js AI (source-diff): Standard esbuild/Babel CJS bundle output; not malicious obfuscation. Stable pattern for this package. ai
source-diff obfuscated-file:es/components/ticketBooking/dialog.js AI (source-diff): Standard Babel transpile output; long lines from inlined helpers, not obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/appPeripheral/components/ConnectExistingDeviceModal.js AI (source-diff): Standard Babel transpile output (regeneratorRuntime, _typeof helpers); not obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/appPeripheral/components/EditDeviceModal.js AI (source-diff): Standard Babel transpile output; not obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/appDevicePlanning/api/index.js AI (source-diff): Standard Babel transpile output; not obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/appDevicePlanning/index.js AI (source-diff): Standard Babel transpile output; not obfuscation. ai
source-diff obfuscated-file:es/components/booking/utils/confirmHolderModal.js AI (source-diff): Standard Babel/regenerator compiled output; long-line minification is expected for this component library. ai
source-diff obfuscated-file:es/components/pay/toB/store/hooks.js AI (source-diff): Same Babel compiled pattern; not obfuscation, just minified build output. ai
source-diff obfuscated-file:es/components/venueBooking/context.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/components/venueBooking/hooks.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/components/scanOrder/hooks.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/components/venueBooking/components/VenueSelection/components/DateNavigator.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/components/scanOrder/context.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/components/eftpos/PairModal/index.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/components/booking/info2/pet/index.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/components/booking/info2/header/index.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/components/booking/info2/clientVariant/vertical/index.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/components/booking/info2/client/index.js AI (source-diff): Standard Babel-transpiled React output; regenerator-runtime boilerplate, not obfuscation. ai
source-diff obfuscated-file:es/plus/pisellReservation/components/blockTimeModal/demo.js AI (source-diff): Standard Babel transpile output with regenerator-runtime; not obfuscation. ai
source-diff obfuscated-file:es/plus/salesSdk/hosts/BookingEditHostRenderer.js AI (source-diff): Standard Babel/regenerator transpiled output; not obfuscated malware. ai
source-diff obfuscated-file:es/plus/salesSdk/utils/assignHolderToCartLine.js AI (source-diff): Standard Babel/regenerator transpiled output; not obfuscated malware. ai
source-diff obfuscated-file:es/plus/salesSdk/utils/addProductWithFlowDebounced.js AI (source-diff): Standard Babel/regenerator transpiled output; not obfuscated malware. ai
source-diff obfuscated-file:es/components/pay/toC/PaymentMethods/components/MiniProgramWaitingPaymentModal/3dsPayment.js AI (source-diff): Standard Babel/regenerator-runtime transpiled output; consistent with this package's compiled React component library pattern. ai
source-diff obfuscated-file:es/plus/pisellReservation/data/bookingCalendarMoveIntegration.js AI (source-diff): Standard Babel/regenerator-runtime transpiled output; consistent with this package's compiled React component library pattern. ai
source-diff obfuscated-file:es/plus/saleDetail/components/CartItems/index.js AI (source-diff): Babel-transpiled output, not obfuscation; stable pattern for this component library. ai
source-diff obfuscated-file:es/plus/salesSdk/demo/components/DemoTabDetail.js AI (source-diff): Babel-transpiled output with standard helpers; not obfuscation. ai
source-diff obfuscated-file:es/plus/saleDetail/components/SaleOverview/index.js AI (source-diff): Babel-transpiled output with standard helpers; not obfuscation. ai
source-diff obfuscated-file:es/plus/saleDetail/components/ButtonActions/index.js AI (source-diff): Babel-transpiled output with standard helpers; not obfuscation. ai
source-diff obfuscated-file:es/plus/salesSdk/demo/components/DemoStepRunner.js AI (source-diff): Babel-transpiled output with standard helpers; not obfuscation. ai
source-diff obfuscated-file:es/plus/salesSdk/demo/components/buildSteps.js AI (source-diff): Babel-transpiled output with standard helpers, not obfuscation. ai
source-diff obfuscated-file:es/plus/salesSdk/demo/components/CartPanel.js AI (source-diff): Babel-transpiled output with regenerator-runtime helpers, not obfuscation. ai
source-diff obfuscated-file:es/plus/salesSdk/utils/buildDefaultLoadProductsParams.js AI (source-diff): Babel-transpiled output with regenerator-runtime helpers, not obfuscation. ai
source-diff obfuscated-file:es/plus/salesSdk/bookingEditService/BookingEditServiceDrawer.js AI (source-diff): Babel-transpiled output with regenerator-runtime helpers, not obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/components/AddDeviceModal/index.js AI (source-diff): Standard Babel-compiled React component output; not intentional obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/deviceProfile/serve.js AI (source-diff): Standard Babel-compiled output consistent with rest of package build pipeline. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/serve.js AI (source-diff): Standard Babel-compiled output consistent with rest of package build pipeline. ai
source-diff obfuscated-file:lib/plus/saasDevice/devicePlanning/components/DeviceDetailDrawer/index.js AI (source-diff): Standard esbuild CJS bundle output with clear source comments; not intentional obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/deviceProfile/index.js AI (source-diff): Standard Babel-compiled React component output; not intentional obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/deviceProfile/components/ProfileSetting/index.js AI (source-diff): Standard Babel-compiled React component output; not intentional obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/deviceProfile/components/CreateProfileModal/index.js AI (source-diff): Standard Babel-compiled React component output; not intentional obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/index.js AI (source-diff): Standard Babel-compiled React component output; not intentional obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/components/WorkAreaModal/index.js AI (source-diff): Standard Babel-compiled React component output; not intentional obfuscation. ai
source-diff obfuscated-file:es/plus/saasDevice/devicePlanning/components/EditDeviceModal/index.js AI (source-diff): Standard Babel-compiled React component output; not intentional obfuscation. ai
source-diff obfuscated-file:es/components/pay/toC/PaymentMethods/StripePay/Stripe/StripeSDK/DynamicSDK.js AI (source-diff): Standard Babel-transpiled output for Stripe SDK loader; minified helpers are expected build artifacts, not obfuscation. ai
publish-pattern new-deps-added AI (publish-pattern): react-zoom-pan-pinch is a legitimate, widely-used React library; no risk signal. ai
phantom-deps phantom-dep:react-zoom-pan-pinch AI (phantom-deps): Declared as runtime dep; phantom-dep heuristic fires on config-only references, stable FP for this package. ai
provenance missing-githead AI (provenance): High-volume package with frequent releases; missing gitHead reflects CI change, not malicious intent. ai
phantom-deps phantom-dep:@dnd-kit/core AI (phantom-deps): Declared dependency used via re-exports; stable pattern for this component library. ai
phantom-deps phantom-dep:@pisell/date-picker AI (phantom-deps): Monorepo internal dependency; stable pattern for this package. ai
phantom-deps phantom-dep:@dnd-kit/utilities AI (phantom-deps): Declared dependency used via re-exports; stable pattern for this component library. ai
phantom-deps phantom-dep:@dnd-kit/sortable AI (phantom-deps): Declared dependency used via re-exports; stable pattern for this component library. ai
semgrep semgrep:new-function-constructor AI (semgrep): Used in a rule/expression evaluator with comment noting it replaces eval; not exfiltration. ai
phantom-deps phantom-dep:rc-virtual-list AI (phantom-deps): Declared runtime dep in a component library; likely re-exported or used indirectly. ai
phantom-deps phantom-dep:styled-components AI (phantom-deps): Declared runtime dep in a component library; likely re-exported or used indirectly. ai
phantom-deps phantom-dep:@dnd-kit/modifiers AI (phantom-deps): Declared runtime dep in a component library; likely re-exported or used indirectly. ai
phantom-deps phantom-dep:react-resizable AI (phantom-deps): Declared runtime dep in a component library; likely re-exported or used indirectly. ai
phantom-deps phantom-dep:react-infinite-scroll-component AI (phantom-deps): Declared runtime dep in a component library; likely re-exported or used indirectly. ai

Versions (showing 100 of 670)

Version Deps Published
6.11.332 20 / 28
6.11.331 20 / 28
6.11.330 20 / 28
6.11.329 20 / 28
6.11.328 20 / 28
6.11.327 20 / 28
6.11.326 20 / 28
6.11.324 20 / 28
6.11.323 20 / 28
6.11.322 20 / 28
6.11.321 20 / 28
6.11.320 20 / 28
6.11.319 20 / 28
6.11.317 20 / 28
6.11.316 20 / 28
6.11.315 20 / 28
6.11.314 20 / 28
6.11.313 20 / 28
6.11.312 20 / 28
6.11.311 20 / 28
6.11.309 20 / 28
6.11.308 20 / 28
6.11.307 20 / 28
6.11.306 20 / 28
6.11.305 20 / 28
6.11.304 20 / 28
6.11.301 20 / 28
6.11.300 20 / 28
6.11.299 20 / 28
6.11.298 20 / 28
6.11.295 20 / 28
6.11.294 20 / 28
6.11.291 20 / 28
6.11.290 20 / 28
6.11.288 20 / 28
6.11.286 20 / 28
6.11.285 20 / 28
6.11.284 20 / 28
6.11.283 20 / 28
6.11.281 20 / 28
6.11.279 20 / 28
6.11.278 20 / 28
6.11.277 20 / 28
6.11.275 20 / 28
6.11.273 20 / 28
6.11.272 20 / 28
6.11.270 20 / 28
6.11.269 20 / 28
6.11.267 20 / 28
6.11.266 20 / 28
6.11.265 20 / 28
6.11.264 20 / 28
6.11.263 20 / 28
6.11.261 20 / 28
6.11.260 20 / 28
6.11.258 20 / 28
6.11.256 20 / 28
6.11.255 20 / 28
6.11.254 20 / 28
6.11.252 20 / 28
6.11.250 20 / 28
6.11.248 20 / 28
6.11.247 20 / 28
6.11.246 20 / 28
6.11.242 20 / 28
6.11.241 20 / 28
6.11.240 20 / 28
6.11.239 20 / 28
6.11.238 20 / 28
6.11.236 20 / 28
6.11.235 20 / 28
6.11.234 20 / 28
6.11.233 20 / 28
6.11.232 20 / 28
6.11.231 20 / 28
6.11.230 20 / 28
6.11.229 20 / 28
6.11.228 20 / 28
6.11.227 20 / 28
6.11.226 20 / 28
6.11.224 20 / 28
6.11.222 20 / 28
6.11.221 20 / 28
6.11.220 20 / 28
6.11.218 20 / 28
6.11.217 20 / 28
6.11.214 20 / 28
6.11.212 20 / 28
6.11.211 20 / 28
6.11.206 20 / 28
6.11.205 20 / 28
6.11.203 20 / 28
6.11.186 20 / 28
6.11.182 20 / 28
6.11.181 20 / 28
6.11.180 20 / 28
6.11.179 20 / 28
6.11.178 20 / 28
6.11.177 20 / 28
6.11.176 20 / 28
Showing 100 of 670 Next page →

v6.11.306

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.11.281

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.11.279

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.11.278

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.11.226

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.11.220

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.11.218

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.11.217

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.11.186

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.11.177

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.