@reltio/ria
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:ria-plugin.js | AI (source-diff): Webpack-bundled minified UI code (emotion/CSS-in-JS), not real obfuscation. | ai | |
| source-diff | net-exec-file:ria-plugin.js | AI (source-diff): Bundled frontend library, network+eval patterns are standard bundler/runtime code. | ai | |
| phantom-deps | phantom-dep:@reltio/mdm-module | AI (phantom-deps): Same-org scoped dep in a monorepo/microfrontend; stable false positive. | ai | |
| phantom-deps | phantom-dep:@reltio/sources | AI (phantom-deps): Same-org scoped dep in a monorepo/microfrontend; stable false positive. | ai | |
| phantom-deps | phantom-dep:@reltio/dashboard | AI (phantom-deps): Same-org scoped dep in a monorepo/microfrontend; stable false positive. | ai | |
| phantom-deps | phantom-dep:@reltio/components | AI (phantom-deps): Same-org scoped dep in a monorepo/microfrontend; stable false positive. | ai | |
| typosquat | typosquat.levenshtein:koa | AI (typosquat): Scoped @reltio org package; Levenshtein match to 'koa' is a false positive for this namespace. | ai | |
| phantom-deps | phantom-dep:react-markdown | AI (phantom-deps): Config-referenced dep in bundled package; stable false positive. | ai | |
| phantom-deps | phantom-dep:rehype-raw | AI (phantom-deps): Config-referenced dep in bundled package; stable false positive. | ai | |
| phantom-deps | phantom-dep:rehype-sanitize | AI (phantom-deps): Config-referenced dep in bundled package; stable false positive. | ai | |
| phantom-deps | phantom-dep:remark-gfm | AI (phantom-deps): Config-referenced dep in bundled package; stable false positive. | ai | |
| phantom-deps | phantom-dep:swr | AI (phantom-deps): Config-referenced dep in bundled package; stable false positive. | ai | |
| phantom-deps | phantom-dep:@reltio/mdm-sdk | AI (phantom-deps): Same-org scoped dep in a monorepo/microfrontend; stable false positive. | ai |
Versions (showing 79 of 179)
| Version | Deps | Published |
|---|---|---|
| 1.4.153 | 7 / 0 | |
| 1.4.152 | 7 / 0 | |
| 1.4.151 | 7 / 0 | |
| 1.4.150 | 7 / 0 | |
| 1.4.149 | 7 / 0 | |
| 1.4.148 | 7 / 0 | |
| 1.4.147 | 7 / 0 | |
| 1.4.146 | 7 / 0 | |
| 1.4.145 | 7 / 0 | |
| 1.4.144 | 7 / 0 | |
| 1.4.143 | 7 / 0 | |
| 1.4.142 | 7 / 0 | |
| 1.4.141 | 7 / 0 | |
| 1.4.140 | 7 / 0 | |
| 1.4.139 | 7 / 0 | |
| 1.4.138 | 7 / 0 | |
| 1.4.137 | 7 / 0 | |
| 1.4.136 | 7 / 0 | |
| 1.4.135 | 7 / 0 | |
| 1.4.134 | 7 / 0 | |
| 1.4.133 | 7 / 0 | |
| 1.4.132 | 7 / 0 | |
| 1.4.131 | 7 / 0 | |
| 1.4.130 | 7 / 0 | |
| 1.4.129 | 7 / 0 | |
| 1.4.128 | 7 / 0 | |
| 1.4.127 | 7 / 0 | |
| 1.4.126 | 7 / 0 | |
| 1.4.125 | 7 / 0 | |
| 1.4.124 | 7 / 0 | |
| 1.4.123 | 7 / 0 | |
| 1.4.122 | 7 / 0 | |
| 1.4.121 | 7 / 0 | |
| 1.4.120 | 7 / 0 | |
| 1.4.119 | 7 / 0 | |
| 1.4.118 | 7 / 0 | |
| 1.4.117 | 7 / 0 | |
| 1.4.116 | 7 / 0 | |
| 1.4.115 | 7 / 0 | |
| 1.4.114 | 7 / 0 | |
| 1.4.113 | 7 / 0 | |
| 1.4.112 | 7 / 0 | |
| 1.4.111 | 7 / 0 | |
| 1.4.110 | 7 / 0 | |
| 1.4.109 | 7 / 0 | |
| 1.4.108 | 7 / 0 | |
| 1.4.107 | 7 / 0 | |
| 1.4.106 | 7 / 0 | |
| 1.4.105 | 7 / 0 | |
| 1.4.104 | 7 / 0 | |
| 1.4.103 | 7 / 0 | |
| 1.4.102 | 7 / 0 | |
| 1.4.101 | 7 / 0 | |
| 1.4.100 | 7 / 0 | |
| 1.4.99 | 7 / 0 | |
| 1.4.98 | 7 / 0 | |
| 1.4.97 | 7 / 0 | |
| 1.4.96 | 7 / 0 | |
| 1.4.95 | 7 / 0 | |
| 1.4.94 | 7 / 0 | |
| 1.4.93 | 7 / 0 | |
| 1.4.92 | 7 / 0 | |
| 1.4.91 | 7 / 0 | |
| 1.4.90 | 7 / 0 | |
| 1.4.89 | 7 / 0 | |
| 1.4.88 | 7 / 0 | |
| 1.4.87 | 7 / 0 | |
| 1.4.86 | 7 / 0 | |
| 1.4.85 | 7 / 0 | |
| 1.4.84 | 7 / 0 | |
| 1.4.83 | 7 / 0 | |
| 1.4.82 | 7 / 0 | |
| 1.4.81 | 7 / 0 | |
| 1.4.80 | 7 / 0 | |
| 1.4.79 | 7 / 0 | |
| 1.4.78 | 7 / 0 | |
| 1.4.77 | 7 / 0 | |
| 1.4.76 | 7 / 0 | |
| 1.4.75 | 7 / 0 |
v1.4.153
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.152
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.151
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.150
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.149
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.148
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.147
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.146
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.145
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.144
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.143
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.142
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.141
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.140
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.139
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.138
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.137
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.136
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.135
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.134
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.133
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.132
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.131
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.130
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.129
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.128
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.127
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.126
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.125
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.124
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.123
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.122
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.121
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.120
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.119
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.118
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.117
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.116
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.115
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.114
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.113
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.112
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.111
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.110
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.109
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.108
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.107
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.106
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.105
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.104
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.103
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.102
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.101
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.100
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.99
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.98
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.97
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.96
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.95
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.94
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.93
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.92
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.91
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.90
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.89
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.88
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.87
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.86
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.85
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.84
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.83
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.82
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.81
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.80
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.78
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.77
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.76
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.4.75
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.