← Home

@superblocksteam/sdk

npm Homepage

Superblocks JS SDK

51
Versions
Superblocks Community Software License
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

superblocksteam-adminnickrttn-sb

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:react-compiler-runtime AI (phantom-deps): Config-referenced by convention like other framework deps. ai
semgrep semgrep:shady-links-raw-ip AI (semgrep): 127.0.0.1 in a test file, not a real exfil endpoint. ai
publish-pattern new-deps-added AI (publish-pattern): react-compiler-runtime is a well-known official React package. ai
phantom-deps phantom-dep:prettier AI (phantom-deps): Prettier is a tooling/config dependency, not a runtime import; stable false positive for this package. ai
phantom-deps phantom-dep:@babel/plugin-proposal-decorators AI (phantom-deps): Babel plugin loaded by convention via config. ai
phantom-deps phantom-dep:@opentelemetry/context-async-hooks AI (phantom-deps): OpenTelemetry context manager loaded by SDK config. ai
phantom-deps phantom-dep:@opentelemetry/exporter-logs-otlp-http AI (phantom-deps): OpenTelemetry exporter loaded via SDK config. ai
phantom-deps phantom-dep:@opentelemetry/exporter-trace-otlp-http AI (phantom-deps): OpenTelemetry exporter loaded via SDK config. ai
phantom-deps phantom-dep:@opentelemetry/semantic-conventions AI (phantom-deps): OpenTelemetry peer dep loaded by SDK. ai
semgrep semgrep:base64-decode AI (semgrep): Standard Buffer.from(data, 'base64') for file contents; not obfuscation. ai
phantom-deps phantom-dep:@opentelemetry/sdk-node AI (phantom-deps): OpenTelemetry SDK loaded via config/instrumentation, not direct import. ai
phantom-deps phantom-dep:@opentelemetry/resources AI (phantom-deps): OpenTelemetry peer dep loaded by SDK at runtime. ai
dependencies unvetted-dep:@superblocksteam/util AI (dependencies): Internal sibling package from the same org/publisher; consistent pattern across all versions of this package. ai

Versions (showing 51 of 82)

View all versions
Version Deps Published
2.0.141 42 / 18
2.0.140 42 / 18
2.0.139 41 / 18
2.0.138 41 / 18
2.0.137 41 / 18
2.0.136 41 / 18
2.0.135 41 / 18
2.0.134 41 / 18
2.0.133 41 / 18
2.0.132 41 / 18
2.0.131 41 / 18
2.0.130 41 / 18
2.0.129 41 / 18
2.0.128 41 / 18
2.0.127 41 / 18
2.0.126 41 / 18
2.0.125 41 / 18
2.0.124 41 / 18
2.0.123 41 / 18
2.0.122 41 / 18
2.0.121 41 / 18
2.0.120 41 / 18
2.0.119 41 / 18
2.0.118 41 / 18
2.0.116 41 / 18
2.0.108 41 / 18
2.0.107 41 / 18
2.0.106 41 / 18
2.0.103 41 / 18
2.0.101 41 / 18
2.0.100 41 / 18
2.0.99 41 / 18
2.0.98 41 / 18
2.0.97 41 / 18
2.0.96 41 / 18
2.0.95 41 / 18
2.0.94 41 / 18
2.0.93 42 / 19
2.0.92 42 / 19
2.0.91 42 / 19
2.0.90 42 / 19
2.0.89 42 / 19
2.0.88 42 / 19
2.0.87 42 / 19
2.0.86 42 / 19
2.0.85 42 / 19
2.0.84 42 / 19
2.0.83 41 / 19
2.0.82 41 / 19
2.0.81 41 / 19
1.14.4 5 / 10

v2.0.141

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.140

2 findings
HIGH shady-links-raw-ip: src/telemetry/otlp-config.test.ts:185 semgrep

HTTP request to raw IP address — legitimate packages use domain names 183 | description: "desc", 184 | attributes: { reason: "flip_restart" }, > 185 | env: { SUPERBLOCKS_BASE_URL: `http://127.0.0.1:${port}` }, 186 | // Tests must observe the request, so keep the socket alive (no unref) and 187 | // await the POST instead of fire-and-forget.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.139

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.138

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.137

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.136

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.118

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.100

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.99

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.98

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.97

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.96

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.95

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.94

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.93

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.92

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.91

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.90

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.89

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.88

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.87

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.85

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.81

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.