← Home

@segment/analytics-browser-actions-braze-cloud-plugins

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

twilio-supply-chainsegmentiosegment-admin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Org-wide switch to CI/CD-attested publishing, consistent with SLSA provenance improvement. ai
maintainer-change maintainer-added AI (maintainer-change): Twilio/Segment supply-chain automation account replacing individual maintainers org-wide. ai
maintainer-change maintainer-removed AI (maintainer-change): Mass removal matches org-wide maintainer list consolidation, not targeted takeover. ai
bogus-package bogus-package AI (bogus-package): Scoped monorepo plugin; missing metadata fields are normal for internal Segment packages. ai
npm-metadata no-description AI (npm-metadata): Consistent pattern across this package's 376 versions; not a malice indicator. ai

Versions (showing 51 of 73)

View all versions
Version Deps Published
1.115.0 2 / 0
1.114.0 2 / 0
1.113.0 2 / 0
1.112.0 2 / 0
1.111.0 2 / 0
1.110.0 2 / 0
1.109.0 2 / 0
1.108.0 2 / 0
1.107.0 2 / 0
1.106.0 2 / 0
1.105.0 2 / 0
1.104.0 2 / 0
1.103.0 2 / 0
1.102.0 2 / 0
1.101.0 2 / 0
1.100.0 2 / 0
1.99.0 2 / 0
1.98.0 2 / 0
1.97.0 2 / 0
1.96.0 2 / 0
1.95.0 2 / 0
1.94.0 2 / 0
1.93.0 2 / 0
1.92.0 2 / 0
1.91.0 2 / 0
1.90.0 2 / 0
1.89.0 2 / 0
1.88.0 2 / 0
1.87.0 2 / 0
1.86.0 2 / 0
1.85.0 2 / 0
1.84.0 2 / 0
1.83.0 2 / 0
1.82.0 2 / 0
1.81.0 2 / 0
1.80.0 2 / 0
1.79.0 2 / 0
1.78.0 2 / 0
1.77.0 2 / 0
1.76.1 2 / 0
1.76.0 2 / 0
1.75.0 2 / 0
1.74.0 2 / 0
1.73.0 2 / 0
1.72.0 2 / 0
1.71.0 2 / 0
1.70.0 2 / 0
1.69.0 2 / 0
1.68.0 2 / 0
1.67.0 2 / 0
1.66.0 2 / 0

v1.115.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.114.0

2 findings
HIGH Publisher changed: varadarajan-tw → GitHub Actions (on 2026-07-09) provenance

This version was published by a different npm account than previous versions on 2026-07-09. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.90.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.89.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.88.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.87.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.86.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.85.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.84.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.83.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.82.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.81.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.80.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.79.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.78.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.77.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.76.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.76.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.75.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.74.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.73.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.72.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.71.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.70.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.69.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.68.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.67.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.66.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.