@salesforce/lds-runtime-aura
LDS engine for Aura runtime
64
Versions
SEE LICENSE IN LICENSE.txt
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ire-npm-team-userjimjagsalesforce-releasesjasonschroeder-sfdcmobifylwc-adminsalesforce-admin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@luvio/service-cache-policy | AI (phantom-deps): Internal Salesforce/luvio monorepo dep referenced via config, not a real risk. | ai | |
| phantom-deps | phantom-dep:@luvio/service-dedupe | AI (phantom-deps): Internal Salesforce/luvio monorepo dep referenced via config, not a real risk. | ai | |
| phantom-deps | phantom-dep:@luvio/runtime | AI (phantom-deps): Internal Salesforce/luvio monorepo dep referenced via config, not a real risk. | ai | |
| phantom-deps | phantom-dep:@luvio/service-type-registry | AI (phantom-deps): Internal Salesforce/luvio monorepo dep referenced via config, not a real risk. | ai | |
| phantom-deps | phantom-dep:@luvio/service-fetch-network | AI (phantom-deps): Internal Salesforce/luvio monorepo dep referenced via config, not a real risk. | ai | |
| phantom-deps | phantom-dep:@luvio/service-subscription | AI (phantom-deps): Internal Salesforce/luvio monorepo dep referenced via config, not a real risk. | ai | |
| dependencies | unvetted-dep:@luvio/service-dedupe | AI (dependencies): First-party @luvio monorepo dependency. | ai | |
| dependencies | unvetted-dep:@luvio/runtime | AI (dependencies): First-party @luvio monorepo dependency used across Salesforce LDS packages. | ai | |
| phantom-deps | phantom-dep:@luvio/utils | AI (phantom-deps): Build/config-referenced, not a real risk for this internal package. | ai | |
| dependencies | unvetted-dep:@luvio/service-type-registry | AI (dependencies): First-party @luvio monorepo dependency. | ai | |
| dependencies | unvetted-dep:@luvio/service-subscription | AI (dependencies): First-party @luvio monorepo dependency. | ai | |
| dependencies | unvetted-dep:@luvio/service-cache-policy | AI (dependencies): First-party @luvio monorepo dependency. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New dep is from the same @conduit-client org scope already heavily used by this package, pinned to exact version. | ai | |
| dependencies | unvetted-dep:@luvio/command-http-graphql-normalized-cache-control | AI (dependencies): Same @luvio org scope as all other accepted luvio deps; consistent with package's established dependency pattern. | ai | |
| dependencies | unvetted-dep:@conduit-client/service-renewable-resource-manager | AI (dependencies): Consistent with existing @conduit-client/* deps at 3.22.0; same org/ecosystem pattern. | ai | |
| provenance | publisher-changed | AI (provenance): lwc-admin is a Salesforce org admin account with 2224 approved packages; publisher consolidation pattern, not a takeover. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): salesforce-admin addition aligns with org-level account consolidation observed across Salesforce packages. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Large Salesforce org package; periodic maintainer list pruning is expected and no new/unknown maintainers were added. | ai | |
| dependencies | unvetted-dep:@luvio/command-aura-normalized-cache-control | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/command-aura-resource-cache-control | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/service-cache-inclusion-policy | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/service-instrument-command | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/service-fetch-network | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/service-feature-flags | AI (dependencies): Newly added dep but same @luvio/* pattern; pinned to matching version. | ai | |
| dependencies | unvetted-dep:@luvio/service-cache-control | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/command-fetch-network | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/service-aura-network | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/command-aura-network | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/command-streaming | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/command-network | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/service-pubsub | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/command-ndjson | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/service-store | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/command-sse | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/service-cache | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/utils | AI (dependencies): Stable @luvio/* ecosystem dep pinned to matching version; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/command-aura-graphql-normalized-cache-control | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| dependencies | unvetted-dep:@luvio/command-http-normalized-cache-control | AI (dependencies): Stable @luvio/* ecosystem dep; consistent pattern across all versions of this package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-aura-graphql-normalized-cache-control | AI (phantom-deps): Config-referenced plugin dep; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-http-graphql-normalized-cache-control | AI (phantom-deps): Config-referenced plugin dep; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-fetch-network | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-sse | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/service-cache | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/service-store | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-ndjson | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/service-pubsub | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-network | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-streaming | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-aura-network | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/service-aura-network | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/service-cache-control | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/service-instrument-command | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/service-cache-inclusion-policy | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-aura-resource-cache-control | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-aura-normalized-cache-control | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| phantom-deps | phantom-dep:@luvio/command-http-normalized-cache-control | AI (phantom-deps): Bundler-resolved @luvio/* dep; stable pattern for this rollup-built package. | ai | |
| dependencies | unvetted-dep:@salesforce/lds-adapters-onestore-graphql | AI (dependencies): Same @salesforce org scope; part of the LDS monorepo. | ai | |
| dependencies | unvetted-dep:@salesforce/lds-adapters-uiapi-lex | AI (dependencies): Same @salesforce org scope; part of the LDS monorepo. | ai | |
| dependencies | unvetted-dep:@luvio/network-adapter-composable | AI (dependencies): Luvio ecosystem dep; consistent with Salesforce LDS runtime. | ai | |
| dependencies | unvetted-dep:@salesforce/lds-luvio-service | AI (dependencies): Same @salesforce org scope; part of the LDS monorepo. | ai | |
| dependencies | unvetted-dep:@lwc/state | AI (dependencies): LWC ecosystem dep from Salesforce; consistent with this package's purpose. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-http-graphql-normalized-cache-control | AI (phantom-deps): Config-file-only reference; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-aura-graphql-normalized-cache-control | AI (phantom-deps): Config-file-only reference; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-http-normalized-cache-control | AI (phantom-deps): Config-file-only reference; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-aura-normalized-cache-control | AI (phantom-deps): Config-file-only reference; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@conduit-client/service-cache-inclusion-policy | AI (phantom-deps): Config-file-only reference; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@conduit-client/service-cache | AI (phantom-deps): Config-file-only reference in Salesforce LDS runtime; stable pattern for this package. | ai | |
| dependencies | unvetted-dep:@salesforce/lds-luvio-uiapi-records-service | AI (dependencies): Same @salesforce org scope; part of the LDS monorepo. | ai | |
| phantom-deps | phantom-dep:@luvio/network-adapter-composable | AI (phantom-deps): Luvio adapter dep referenced in config; stable false positive. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-streaming | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-network | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@conduit-client/service-pubsub | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-ndjson | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@salesforce/lds-luvio-service | AI (phantom-deps): Same-org Salesforce dep; phantom-dep heuristic is a false positive here. | ai | |
| phantom-deps | phantom-dep:@conduit-client/service-store | AI (phantom-deps): Conduit client deps declared for config/bundling; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-sse | AI (phantom-deps): Conduit client deps are declared for bundling/config use in this Salesforce LDS package; stable pattern. | ai | |
| phantom-deps | phantom-dep:@luvio/network-adapter-fetch | AI (phantom-deps): Luvio adapter deps referenced in config files; consistent with this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-aura-resource-cache-control | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@salesforce/lds-luvio-uiapi-records-service | AI (phantom-deps): Same-org Salesforce dep; phantom-dep heuristic is a false positive here. | ai | |
| phantom-deps | phantom-dep:@conduit-client/service-bindings-imperative | AI (phantom-deps): Platform-specific binary dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@conduit-client/service-instrument-command | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@salesforce/lds-adapters-onestore-graphql | AI (phantom-deps): Same-org Salesforce dep; phantom-dep heuristic is a false positive here. | ai | |
| phantom-deps | phantom-dep:@conduit-client/service-feature-flags | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@conduit-client/service-cache-control | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-fetch-network | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@conduit-client/service-aura-network | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@conduit-client/command-aura-network | AI (phantom-deps): Conduit client dep; stable false positive for this package's build pattern. | ai | |
| phantom-deps | phantom-dep:@salesforce/lds-adapters-uiapi-lex | AI (phantom-deps): Same-org Salesforce dep; phantom-dep heuristic is a false positive here. | ai |
Versions (showing 64 of 64)
| Version | Deps | Published |
|---|---|---|
| 1.444.0 | 34 / 12 | |
| 1.443.0 | 33 / 12 | |
| 1.436.0 | 32 / 12 | |
| 1.435.1 | 32 / 12 | |
| 1.435.0 | 32 / 12 | |
| 1.434.0 | 32 / 11 | |
| 1.433.0 | 32 / 11 | |
| 1.432.0 | 32 / 11 | |
| 1.431.0 | 32 / 11 | |
| 1.430.0 | 32 / 11 | |
| 1.429.0 | 32 / 11 | |
| 1.419.0 | 31 / 11 | |
| 1.418.0 | 31 / 11 | |
| 1.414.1 | 31 / 11 | |
| 1.413.0 | 30 / 11 | |
| 1.412.1 | 30 / 11 | |
| 1.412.0 | 30 / 11 | |
| 1.411.0 | 30 / 11 | |
| 1.404.0 | 28 / 11 | |
| 1.403.0 | 28 / 11 | |
| 1.402.0 | 28 / 11 | |
| 1.400.0 | 28 / 11 | |
| 1.399.0 | 28 / 11 | |
| 1.396.0 | 28 / 11 | |
| 1.389.2 | 28 / 11 | |
| 1.389.1 | 28 / 11 | |
| 1.386.0 | 28 / 11 | |
| 1.385.0 | 28 / 11 | |
| 1.384.0 | 28 / 12 | |
| 1.382.0 | 27 / 12 | |
| 1.381.0 | 27 / 12 | |
| 1.379.1 | 27 / 12 | |
| 1.376.0 | 25 / 12 | |
| 1.374.0 | 25 / 12 | |
| 1.373.0 | 25 / 12 | |
| 1.371.0 | 21 / 12 | |
| 1.370.0 | 21 / 12 | |
| 1.369.0 | 21 / 12 | |
| 1.368.0 | 21 / 12 | |
| 1.367.0 | 21 / 12 | |
| 1.366.0 | 21 / 12 | |
| 1.365.0 | 21 / 12 | |
| 1.364.0 | 21 / 12 | |
| 1.363.0 | 21 / 12 | |
| 1.362.0 | 21 / 12 | |
| 1.361.0 | 21 / 12 | |
| 1.360.1 | 21 / 12 | |
| 1.360.0 | 21 / 12 | |
| 1.306.0 | 19 / 10 | |
| 1.304.0 | 19 / 10 | |
| 1.303.0 | 18 / 10 | |
| 1.302.0 | 2 / 18 | |
| 1.301.0 | 2 / 18 | |
| 1.300.0 | 2 / 18 | |
| 1.299.0 | 2 / 18 | |
| 1.298.0 | 2 / 18 | |
| 1.297.0 | 2 / 18 | |
| 1.296.1 | 2 / 18 | |
| 1.296.0 | 2 / 18 | |
| 1.295.0 | 2 / 18 | |
| 1.294.0 | 2 / 17 | |
| 1.293.0 | 2 / 17 | |
| 1.292.0 | 2 / 17 | |
| 1.291.0 | 2 / 17 |
v1.306.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.304.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.303.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.302.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.301.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.300.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.299.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.298.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.297.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.296.1
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.296.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.295.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.294.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.293.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.292.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.291.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.