← Home

@shapediver/viewer.rendering-engine.intersection-engine

This package is part of the [`@shapediver/viewer`](https://www.npmjs.com/package/@shapediver/viewer), you can find all information [here](https://viewer.shapediver.com/v3/latest/api/index.html).

100
Versions
polyform-noncommercial-1.0.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

snabelamichael_at_shapedivermatt_at_shapediverdmitry_at_shapediver

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:detect-it AI (phantom-deps): Referenced in config/bundler setup for this package; stable false positive. ai
phantom-deps phantom-dep:@types/three AI (phantom-deps): Type-only package loaded by convention; stable false positive for this package. ai
phantom-deps phantom-dep:@shapediver/viewer.shared.math AI (phantom-deps): Same-org monorepo dep; phantom-dep heuristic unreliable here. ai
phantom-deps phantom-dep:@shapediver/viewer.rendering-engine.rendering-engine AI (phantom-deps): Same-org monorepo dep; phantom-dep heuristic unreliable here. ai

Versions (showing 100 of 174)

Version Deps Published
3.19.3 9 / 0
3.18.2 9 / 0
3.18.1 9 / 0
3.18.0 9 / 0
3.17.0 9 / 0
3.16.10 9 / 0
3.16.9 9 / 0
3.16.8 9 / 0
3.16.7 9 / 0
3.16.6 9 / 0
3.16.5 9 / 0
3.16.4 9 / 0
3.16.3 9 / 0
3.16.2 9 / 0
3.16.1 9 / 0
3.16.0 9 / 0
3.15.12 9 / 0
3.15.11 9 / 0
3.15.10 9 / 0
3.15.9 9 / 0
3.15.8 9 / 0
3.15.7 9 / 0
3.15.6 9 / 0
3.15.5 9 / 0
3.15.4 9 / 0
3.15.3 9 / 0
3.15.2 9 / 0
3.15.1 9 / 0
3.15.0 9 / 0
3.14.10 9 / 0
3.14.9 9 / 0
3.14.8 9 / 0
3.14.7 9 / 0
3.14.6 9 / 0
3.14.5 9 / 0
3.14.4 9 / 0
3.14.3 9 / 0
3.14.2 9 / 0
3.14.1 9 / 0
3.14.0 9 / 0
3.13.20 9 / 0
3.13.19 9 / 0
3.13.18 9 / 0
3.13.17 9 / 0
3.13.16 9 / 0
3.13.15 9 / 0
3.13.14 9 / 0
3.13.13 9 / 0
3.13.12 9 / 0
3.13.11 9 / 0
3.13.10 9 / 0
3.13.9 9 / 0
3.13.8 9 / 0
3.13.7 9 / 0
3.13.6 9 / 0
3.13.5 9 / 0
3.13.4 9 / 0
3.13.3 9 / 0
3.13.2 9 / 0
3.13.1 9 / 0
3.13.0 9 / 0
3.12.21 9 / 0
3.12.20 9 / 0
3.12.19 9 / 0
3.12.18 9 / 0
3.12.17 9 / 0
3.12.16 9 / 0
3.12.15 9 / 0
3.12.14 9 / 0
3.12.13 9 / 0
3.12.12 9 / 0
3.12.11 9 / 0
3.12.10 9 / 0
3.12.9 9 / 0
3.12.8 9 / 0
3.12.7 9 / 0
3.12.6 9 / 0
3.12.5 9 / 0
3.12.4 9 / 0
3.12.3 9 / 0
3.12.2 9 / 0
3.12.1 9 / 0
3.12.0 9 / 0
3.11.14 9 / 0
3.11.13 9 / 0
3.11.12 9 / 0
3.11.11 9 / 0
3.11.10 9 / 0
3.11.9 9 / 0
3.11.8 9 / 0
3.11.7 9 / 0
3.11.6 9 / 0
3.11.5 9 / 0
3.11.4 9 / 0
3.11.3 9 / 0
3.11.2 9 / 0
3.11.1 9 / 0
3.11.0 9 / 0
3.10.0 9 / 0
3.9.10 9 / 0
Showing 100 of 174 Next page →

v3.19.3

2 findings
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

INFO Publisher changed: michael_at_shapediver → GitHub Actions (on 2026-07-13, now via trusted publisher with provenance) provenance

This version was published by a different npm account (GitHub Actions) than the most recent previously approved version (michael_at_shapediver) on 2026-07-13, but it carries Sigstore provenance attestation. This means the package moved to a trusted publisher (CI/CD with OIDC, e.g. GitHub Actions) — a supply-chain integrity improvement, not a compromise, since a stolen npm token cannot forge provenance bound to the source repository. Recorded as INFO for audit trail.