@siemens/maps-ng
Element maps library based on OpenLayers.
34
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
timowolfkfennerfh1chspike-rabbitsiemens-element-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:index.d.ts | AI (source-diff): index.d.ts is a bundled Angular type declaration file; long lines are normal for generated .d.ts rollups, not obfuscation. | ai | |
| source-diff | obfuscated-file:types/siemens-maps-ng.d.ts | AI (source-diff): File is a bundled TypeScript declaration file with long lines from type concatenation, not obfuscated code. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from bot account to GitHub Actions CI/CD is a legitimate pipeline change, backed by SLSA provenance attestation. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit Angular/TypeScript runtime dependency; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:components/si-map/si-map.component.d.ts | AI (source-diff): Angular .d.ts files with verbose signal type signatures produce long lines; not obfuscation. | ai |
Versions (showing 34 of 34)
| Version | Deps | Published |
|---|---|---|
| 50.0.0 | 1 / 0 | |
| 49.13.0 | 1 / 0 | |
| 49.12.0 | 1 / 0 | |
| 49.11.0 | 1 / 0 | |
| 49.10.0 | 1 / 0 | |
| 49.9.0 | 1 / 0 | |
| 49.8.0 | 1 / 0 | |
| 49.7.0 | 1 / 0 | |
| 49.6.0 | 1 / 0 | |
| 49.5.0 | 1 / 0 | |
| 49.4.0 | 1 / 0 | |
| 49.3.0 | 1 / 0 | |
| 49.2.0 | 1 / 0 | |
| 49.1.0 | 1 / 0 | |
| 49.0.0 | 1 / 0 | |
| 48.11.2 | 1 / 0 | |
| 48.11.1 | 1 / 0 | |
| 48.11.0 | 1 / 0 | |
| 48.10.3 | 1 / 0 | |
| 48.10.2 | 1 / 0 | |
| 48.10.1 | 1 / 0 | |
| 48.10.0 | 1 / 0 | |
| 48.9.0 | 1 / 0 | |
| 48.8.0 | 1 / 0 | |
| 48.7.0 | 1 / 0 | |
| 48.6.0 | 1 / 0 | |
| 48.5.2 | 1 / 0 | |
| 48.5.1 | 1 / 0 | |
| 48.5.0 | 1 / 0 | |
| 48.4.0 | 1 / 0 | |
| 48.3.0 | 1 / 0 | |
| 47.12.2 | 1 / 0 | |
| 47.12.1 | 1 / 0 | |
| 47.12.0 | 1 / 0 |
v49.13.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.