@segment/analytics-browser-actions-bucket No license 51 versions

@segment/analytics-browser-actions-bucket

npm Repository Homepage

51

Versions

—

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

twilio-supply-chainsegmentiosegment-admin

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): CI/CD migration to GitHub Actions bot with SLSA provenance, not a takeover.	ai	2026/07/09
maintainer-change	maintainer-added	AI (maintainer-change): Reflects org-wide npm publishing automation transition, verified by provenance improvement.	ai	2026/07/09
maintainer-change	maintainer-removed	AI (maintainer-change): Mass removal is consistent with switch to automated CI publishing across the whole monorepo.	ai	2026/07/09
bogus-package	bogus-package	AI (bogus-package): Internal Segment monorepo package; missing metadata is expected, not indicative of spam/malware.	ai	2026/05/14
npm-metadata	no-description	AI (npm-metadata): Consistent across all versions of this internal SDK package; not a malice signal.	ai	2026/05/14

Versions (showing 51 of 62)

View all versions

Version	Deps	Published
1.81.0	3 / 0	2026-07-13
1.80.0	3 / 0	2026-07-09
1.79.0	3 / 0	2026-04-28
1.78.0	3 / 0	2026-04-14
1.77.0	3 / 0	2026-03-17
1.76.0	3 / 0	2026-02-24
1.75.0	3 / 0	2026-01-29
1.74.0	3 / 0	2025-11-05
1.73.0	3 / 0	2025-11-05
1.72.0	3 / 0	2025-10-30
1.71.0	3 / 0	2025-09-30
1.70.0	3 / 0	2025-08-19
1.69.0	3 / 0	2025-07-10
1.68.0	3 / 0	2025-07-03
1.67.0	3 / 0	2025-06-23
1.66.0	3 / 0	2025-05-21
1.65.0	3 / 0	2025-05-21
1.64.0	3 / 0	2025-05-06
1.63.0	3 / 0	2025-04-29
1.62.0	3 / 0	2025-04-07
1.61.0	3 / 0	2025-03-26
1.60.0	3 / 0	2025-03-20
1.59.0	3 / 0	2025-03-04
1.58.0	3 / 0	2025-02-26
1.57.0	3 / 0	2025-02-18
1.56.0	3 / 0	2025-02-17
1.55.0	3 / 0	2025-02-10
1.54.0	3 / 0	2025-02-04
1.53.0	3 / 0	2025-01-29
1.52.0	3 / 0	2025-01-21
1.51.0	3 / 0	2024-12-03
1.50.1	3 / 0	2024-11-21
1.50.0	3 / 0	2024-11-18
1.49.0	3 / 0	2024-10-23
1.48.0	3 / 0	2024-10-17
1.47.0	3 / 0	2024-10-16
1.46.0	3 / 0	2024-10-08
1.45.0	3 / 0	2024-10-01
1.44.0	3 / 0	2024-09-24
1.43.0	3 / 0	2024-09-23
1.42.0	3 / 0	2024-09-16
1.41.0	3 / 0	2024-09-12
1.40.0	3 / 0	2024-09-09
1.39.0	3 / 0	2024-08-28
1.38.0	3 / 0	2024-08-26
1.37.0	3 / 0	2024-08-08
1.36.0	3 / 0	2024-08-06
1.35.0	3 / 0	2024-08-05
1.34.0	3 / 0	2024-07-23
1.33.0	3 / 0	2024-07-23
1.32.0	3 / 0	2024-07-09

v1.81.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.80.0

2 findings

HIGH Publisher changed: varadarajan-tw → GitHub Actions (on 2026-07-09) provenance

This version was published by a different npm account than previous versions on 2026-07-09. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.62.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.61.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.60.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.59.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.58.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.57.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.56.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.55.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.54.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.53.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.52.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.50.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.50.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.49.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.48.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.47.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.46.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.45.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.44.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.43.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.42.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.41.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.40.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.39.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.38.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.37.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.36.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.35.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.34.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.33.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.32.0

2 findings

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: marinhero → forgetfulfellow (on 2024-07-09, known maintainer) provenance

This version was published by a different npm account (forgetfulfellow) than the most recent previously approved version (marinhero) on 2024-07-09, but forgetfulfellow is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.