← Home

@walkeros/web-destination-mixpanel

npm Repository Homepage

Mixpanel web destination for walkerOS (events, people, groups, consent)

16
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

alexanderkirtzel

Keywords

walkerOSwalkerOS-destinationdestinationwebmixpanelanalyticsproduct-analytics

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher is GitHub Actions CI with SLSA provenance; this is the documented release pipeline for the elbwalker/walkerOS monorepo. ai
source-diff encoded-string-file:dist/index.browser.js AI (source-diff): Encoded strings are standard minified bundle output; samples show normal module boilerplate, not obfuscated payloads. ai
source-diff encoded-string-file:dist/index.es5.js AI (source-diff): Same as browser bundle — ES5 transpilation polyfills, not malicious encoding. ai
provenance no-provenance AI (provenance): Stable false positive for this package; no provenance is common and no other risk signals present. ai

Versions (showing 16 of 16)

Version Deps Published
4.3.2 3 / 2
4.3.1 3 / 2
4.3.0 3 / 2
4.2.1 3 / 2
4.2.0 3 / 2
4.1.2 3 / 2
4.1.1 3 / 2
4.1.0 3 / 2
4.0.2 2 / 2
4.0.1 2 / 2
4.0.0 2 / 2
3.4.2 2 / 2
3.4.1 2 / 2
3.4.0 2 / 2
3.3.1 2 / 2
3.3.0 2 / 2

v4.3.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.3.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.