@webex/web-media-effects
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): Bundled via rollup; declared as runtime dep, not directly imported in source but used transitively. | ai | |
| phantom-deps | phantom-dep:yarn | AI (phantom-deps): yarn listed as runtime dep for engine compatibility scripts; not a real phantom-dep concern. | ai | |
| phantom-deps | phantom-dep:events | AI (phantom-deps): Node polyfill bundled via rollup-plugin-node-polyfills; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:worker-timers | AI (phantom-deps): Bundled via rollup; phantom-dep heuristic fires on config references, not a real concern. | ai |
Versions (showing 51 of 69)
| Version | Deps | Published |
|---|---|---|
| 2.34.0 | 8 / 37 | |
| 2.33.6 | 7 / 37 | |
| 2.33.5 | 7 / 37 | |
| 2.33.4 | 7 / 37 | |
| 2.33.3 | 7 / 37 | |
| 2.33.2 | 7 / 37 | |
| 2.33.1 | 7 / 37 | |
| 2.33.0 | 7 / 37 | |
| 2.32.10 | 7 / 37 | |
| 2.32.9 | 7 / 37 | |
| 2.32.8 | 7 / 37 | |
| 2.32.7 | 7 / 37 | |
| 2.32.6 | 7 / 37 | |
| 2.32.5 | 7 / 37 | |
| 2.32.4 | 7 / 37 | |
| 2.32.1 | 7 / 37 | |
| 2.32.0 | 7 / 37 | |
| 2.31.1 | 7 / 37 | |
| 2.31.0 | 7 / 37 | |
| 2.30.2 | 7 / 37 | |
| 2.30.1 | 7 / 37 | |
| 2.30.0 | 7 / 37 | |
| 2.29.0 | 7 / 37 | |
| 2.28.2 | 7 / 37 | |
| 2.28.1 | 7 / 37 | |
| 2.28.0 | 7 / 37 | |
| 2.27.2 | 7 / 37 | |
| 2.27.1 | 7 / 37 | |
| 2.27.0 | 7 / 37 | |
| 2.26.2 | 7 / 37 | |
| 2.26.1 | 7 / 37 | |
| 2.26.0 | 7 / 37 | |
| 2.25.2 | 7 / 37 | |
| 2.25.1 | 7 / 37 | |
| 2.25.0 | 7 / 37 | |
| 2.24.1 | 7 / 37 | |
| 2.24.0 | 7 / 37 | |
| 2.23.7 | 7 / 37 | |
| 2.23.6 | 7 / 37 | |
| 2.23.5 | 7 / 37 | |
| 2.23.4 | 7 / 37 | |
| 2.23.3 | 7 / 37 | |
| 2.23.2 | 7 / 37 | |
| 2.23.1 | 7 / 37 | |
| 2.23.0 | 6 / 37 | |
| 2.22.8 | 6 / 37 | |
| 2.22.7 | 6 / 37 | |
| 2.22.6 | 6 / 37 | |
| 2.22.5 | 6 / 37 | |
| 2.22.4 | 6 / 37 | |
| 2.22.3 | 6 / 37 |
v2.34.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.33.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.33.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.32.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.31.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.27.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.27.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.26.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.26.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.26.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.25.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.25.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.25.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.24.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.24.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.23.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.23.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.23.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.23.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.23.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.23.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.23.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.23.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.22.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.22.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.22.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.22.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.22.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.22.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.