@salesforce/lds-adapters-cdp-document-processing
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): salesforce-admin addition aligns with Salesforce internal account consolidation pattern seen across their npm org. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Mass removal of individual Salesforce employee accounts in favor of org-level admin account; consistent with internal policy change. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy followed by publish under trusted lwc-admin account with no material code changes; low risk. | ai | |
| provenance | publisher-changed | AI (provenance): lwc-admin is a known Salesforce org publisher with 3292 approved packages; transition from individual to org account is expected. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Internal Salesforce LDS adapter; sparse metadata is consistent across all versions of this monorepo package family. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Intentionally empty description; consistent pattern across Salesforce LDS adapter packages. | ai | |
| phantom-deps | phantom-dep:@salesforce/lds-bindings | AI (phantom-deps): Same-org dependency used at runtime via bundled dist; phantom-dep heuristic is a false positive here. | ai |
Versions (showing 51 of 107)
| Version | Deps | Published |
|---|---|---|
| 1.450.0 | 1 / 1 | |
| 1.449.0 | 1 / 1 | |
| 1.448.0 | 1 / 1 | |
| 1.447.1 | 1 / 1 | |
| 1.447.0 | 1 / 1 | |
| 1.446.0 | 1 / 1 | |
| 1.445.0 | 1 / 1 | |
| 1.444.0 | 1 / 1 | |
| 1.443.0 | 1 / 1 | |
| 1.442.0 | 1 / 1 | |
| 1.441.0 | 1 / 1 | |
| 1.440.0 | 1 / 1 | |
| 1.439.0 | 1 / 1 | |
| 1.438.1 | 1 / 1 | |
| 1.438.0 | 1 / 1 | |
| 1.437.0 | 1 / 1 | |
| 1.436.0 | 1 / 1 | |
| 1.435.1 | 1 / 1 | |
| 1.435.0 | 1 / 1 | |
| 1.434.0 | 1 / 1 | |
| 1.433.0 | 1 / 1 | |
| 1.432.0 | 1 / 1 | |
| 1.431.0 | 1 / 1 | |
| 1.430.0 | 1 / 1 | |
| 1.429.0 | 1 / 1 | |
| 1.428.0 | 1 / 1 | |
| 1.427.0 | 1 / 1 | |
| 1.426.1 | 1 / 1 | |
| 1.425.0 | 1 / 1 | |
| 1.424.0 | 1 / 1 | |
| 1.423.0 | 1 / 1 | |
| 1.422.0 | 1 / 1 | |
| 1.421.1 | 1 / 1 | |
| 1.421.0 | 1 / 1 | |
| 1.420.0 | 1 / 1 | |
| 1.419.0 | 1 / 1 | |
| 1.418.0 | 1 / 1 | |
| 1.417.0 | 1 / 1 | |
| 1.416.1 | 1 / 1 | |
| 1.416.0 | 1 / 1 | |
| 1.415.0 | 1 / 1 | |
| 1.414.1 | 1 / 1 | |
| 1.414.0 | 1 / 1 | |
| 1.413.0 | 1 / 1 | |
| 1.412.1 | 1 / 1 | |
| 1.412.0 | 1 / 1 | |
| 1.411.0 | 1 / 1 | |
| 1.410.1 | 1 / 1 | |
| 1.410.0 | 1 / 1 | |
| 1.409.0 | 1 / 1 | |
| 1.405.0 | 1 / 1 |
v1.450.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.449.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.448.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.447.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.447.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.