← Home

@textbus/platform-browser

37
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

textbus

Keywords

textbus富文本编辑器wysiwygwysiwyg editorrich text editoreditorhtml editorweb editortypescript editor

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@tanbo/di AI (dependencies): @tanbo/di is from the same author namespace as the package; standard DI library for this ecosystem. ai
provenance missing-githead AI (provenance): Established package with long history; missing gitHead alone is not a disqualifier given clean version diff and no other risk signals. ai
source-diff obfuscated-file:dist/index.js AI (source-diff): dist/index.js is standard minified library output; sample shows readable DOM/editor logic with no malicious patterns. ai
provenance no-provenance AI (provenance): Mature package with 239 published versions; lack of provenance is consistent across its history and not a risk indicator. ai

Versions (showing 37 of 37)

Version Deps Published
5.5.2 3 / 2
5.5.1 3 / 2
5.5.0 3 / 2
5.4.11 3 / 2
5.4.10 3 / 2
5.4.9 3 / 2
5.4.8 3 / 2
5.4.7 3 / 2
5.4.6 3 / 2
5.4.5 3 / 2
5.4.4 3 / 2
5.4.3 3 / 2
5.4.2 3 / 2
5.4.1 3 / 2
5.4.0 3 / 2
5.3.4 3 / 2
5.3.3 3 / 2
5.3.2 3 / 2
5.3.1 3 / 2
5.3.0 3 / 2
5.2.7 3 / 2
5.2.6 3 / 2
5.2.5 3 / 2
5.2.4 3 / 2
5.2.3 3 / 2
5.2.2 3 / 2
5.2.1 3 / 2
5.2.0 3 / 2
5.1.6 3 / 5
5.1.5 3 / 5
5.1.4 3 / 5
5.1.3 3 / 5
5.1.2 3 / 5
5.1.1 3 / 5
5.1.0 3 / 5
5.0.0 3 / 5
3.8.5 4 / 5