@syntrologie/adapt-overlays
Adaptive Overlays app - Visual overlays for tooltips, highlights, badges, and pulses
13
Versions
Proprietary
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
syntrologie-eng
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | rapid-publish | AI (publish-pattern): High-frequency automated publishing is the norm for this org (350 versions); rapid publishes with no material changes are expected CI behavior. | ai | |
| phantom-deps | phantom-dep:@syntrologie/shared-editor-ui | AI (phantom-deps): Bundled dependency; declared in bundledDependencies for build-time inclusion, not runtime import. | ai | |
| phantom-deps | phantom-dep:@syntro/design-system | AI (phantom-deps): Bundled dependency; declared in bundledDependencies for build-time inclusion, not runtime import. | ai | |
| dependencies | unvetted-dep:@syntrologie/shared-editor-ui | AI (dependencies): Internal Syntrologie shared editor UI package listed as a bundledDependency; wildcard version is standard monorepo practice for same-org packages. | ai | |
| dependencies | unvetted-dep:@syntro/design-system | AI (dependencies): Internal Syntrologie design system package listed as a bundledDependency; resolved within the monorepo at build time, not a third-party unknown. | ai | |
| dependencies | unvetted-dep:@syntrologie/sdk-contracts | AI (dependencies): Internal Syntrologie SDK contracts package listed as a bundledDependency; wildcard version is standard monorepo practice for same-org packages. | ai | |
| provenance | no-provenance | AI (provenance): Proprietary org package; lack of Sigstore provenance is common and not a disqualifying signal for this publisher. | ai | |
| dependencies | unvetted-dep:lit | AI (dependencies): lit is Google's well-known web components library; pinned to 3.3.2. Not a security risk for this package. | ai |