← Home

@web-atoms/entity

51
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

ackava

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing with SLSA provenance attestation; legitimate automation handoff for this org's packages. ai
bogus-package bogus-package AI (bogus-package): 214-version established package; sparse README/keywords are a style choice, not spam. ai
phantom-deps phantom-dep:@web-atoms/module-loader AI (phantom-deps): Same org scope; likely used transitively or at runtime rather than via direct import. ai
phantom-deps phantom-dep:reflect-metadata AI (phantom-deps): reflect-metadata is a known implicit runtime dep for TypeScript decorators; stable false positive. ai
semgrep semgrep:api-obfuscation-reflect AI (semgrep): Standard Reflect.get usage for proxy/decorator pattern in entity change tracking; not obfuscation. ai
phantom-deps phantom-dep:@web-atoms/web-controls AI (phantom-deps): Same-org package; phantom-dep heuristic unreliable for peer/optional usage patterns. ai
semgrep semgrep:eval-usage AI (semgrep): eval used in MockBaseEntityService to build filter lambdas from query strings in test mocks; not production attack surface. ai
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require in test.js test runner loading local .js files; not a supply-chain risk. ai

Versions (showing 51 of 53)

View all versions
Version Deps Published
2.6.8 4 / 5
2.5.11 5 / 3
2.5.10 5 / 3
2.5.8 5 / 3
2.5.7 5 / 3
2.5.6 5 / 3
2.5.5 5 / 3
2.5.4 5 / 3
2.5.2 5 / 3
2.4.89 5 / 3
2.4.88 5 / 3
2.4.87 5 / 3
2.4.86 5 / 3
2.4.85 5 / 3
2.4.84 5 / 3
2.4.83 5 / 3
2.4.82 5 / 3
2.4.81 5 / 3
2.4.80 5 / 3
2.4.79 5 / 3
2.4.78 5 / 3
2.4.77 5 / 3
2.4.76 5 / 3
2.4.75 5 / 3
2.4.74 5 / 3
2.4.73 5 / 3
2.4.72 5 / 3
2.4.71 5 / 3
2.4.70 5 / 3
2.4.69 5 / 2
2.4.68 5 / 2
2.4.67 5 / 2
2.4.66 5 / 2
2.4.65 5 / 2
2.4.64 5 / 2
2.4.63 5 / 2
2.4.62 5 / 2
2.4.61 5 / 2
2.4.60 5 / 2
2.4.59 5 / 2
2.4.58 5 / 2
2.4.57 5 / 2
2.4.56 5 / 2
2.4.54 5 / 2
2.4.53 5 / 2
2.4.52 5 / 2
2.4.51 5 / 2
2.4.50 5 / 2
2.4.49 5 / 2
2.4.48 5 / 2
2.4.47 5 / 2

v2.4.82

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.81

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.80

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.79

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.78

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.77

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.76

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.75

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.74

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.73

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.72

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.71

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.70

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.69

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.68

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.67

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.66

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.65

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.64

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.63

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.62

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.61

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.60

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.59

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.58

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.57

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.56

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.54

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.53

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.52

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.51

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.50

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.49

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.48

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.47

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.