@wix/auto_sdk_crm_contacts-v-5
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-rkyEtvlE.d.ts | AI (source-diff): Long-line .d.ts type file from tsup build, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-rkyEtvlE.d.mts | AI (source-diff): Long-line .d.mts type file from tsup build, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-rkyEtvlE.d.ts | AI (source-diff): Long-line .d.ts type file from tsup build, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-rkyEtvlE.d.mts | AI (source-diff): Long-line .d.mts type file from tsup build, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-DOKPWHNy.d.ts | AI (source-diff): Long-line .d.ts type declarations, not obfuscated executable code. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-DOKPWHNy.d.mts | AI (source-diff): Long-line .d.ts type declarations, not obfuscated executable code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-DOKPWHNy.d.ts | AI (source-diff): Long-line .d.ts type declarations, not obfuscated executable code. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-DOKPWHNy.d.mts | AI (source-diff): Long-line .d.ts type declarations, not obfuscated executable code. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-DQ0VgYqw.d.mts | AI (source-diff): Same generated type-declaration file, internal build path. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-DQ0VgYqw.d.mts | AI (source-diff): Generated .d.mts type declarations, not obfuscated code; long lines from JSDoc/type unions. | ai | |
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-DQ0VgYqw.d.ts | AI (source-diff): Same generated type-declaration file, cjs build path. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-DQ0VgYqw.d.ts | AI (source-diff): Same generated type-declaration file, internal cjs build path. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-CehUMnuf.d.mts | AI (source-diff): Generated .d.mts type file with long lines, not obfuscated code; stable pattern for this SDK generator. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-CehUMnuf.d.ts | AI (source-diff): Generated .d.ts type file with long lines, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-CehUMnuf.d.ts | AI (source-diff): Generated .d.ts type file with long lines, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-CehUMnuf.d.mts | AI (source-diff): Generated .d.mts type file with long lines, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-B3ebcTEk.d.mts | AI (source-diff): Same generated type-declaration artifact. | ai | |
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-B3ebcTEk.d.ts | AI (source-diff): Same generated type-declaration artifact. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-B3ebcTEk.d.ts | AI (source-diff): Same generated type-declaration artifact. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-B3ebcTEk.d.mts | AI (source-diff): Long-line .d.mts is generated TS type declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-Bkb1VwgJ.d.ts | AI (source-diff): Same generated .d.ts type file, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-Bkb1VwgJ.d.mts | AI (source-diff): Long-line TS type declaration file from tsup build, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-Bkb1VwgJ.d.mts | AI (source-diff): Same generated .d.mts type file, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-Bkb1VwgJ.d.ts | AI (source-diff): Same generated .d.ts type file, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-DARTxFF5.d.ts | AI (source-diff): Auto-generated .d.ts type declarations with long lines, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-DARTxFF5.d.mts | AI (source-diff): Auto-generated .d.mts type declarations with long lines, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-DARTxFF5.d.mts | AI (source-diff): Auto-generated .d.mts type declarations with long lines, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-DARTxFF5.d.ts | AI (source-diff): Auto-generated .d.ts type declarations with long lines, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-D5olkuCL.d.mts | AI (source-diff): Auto-generated TS declaration file, long lines from type defs, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-D5olkuCL.d.ts | AI (source-diff): Auto-generated TS declaration file, long lines from type defs, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-D5olkuCL.d.ts | AI (source-diff): Auto-generated TS declaration file, long lines from type defs, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-D5olkuCL.d.mts | AI (source-diff): Auto-generated TS declaration file, long lines from type defs, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-WP0_Bz1c.d.mts | AI (source-diff): Long lines are generated TS type declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-WP0_Bz1c.d.ts | AI (source-diff): Long lines are generated TS type declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-WP0_Bz1c.d.ts | AI (source-diff): Long lines are generated TS type declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-WP0_Bz1c.d.mts | AI (source-diff): Long lines are generated TS type declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/contacts-v5-contact-contacts-v-5.universal-CSsPpp2m.d.mts | AI (source-diff): Generated .d.ts type file with long lines, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/contacts-v5-contact-contacts-v-5.universal-CSsPpp2m.d.ts | AI (source-diff): Generated .d.ts type file with long lines, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/contacts-v5-contact-contacts-v-5.universal-CSsPpp2m.d.ts | AI (source-diff): Generated .d.ts type file with long lines, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/contacts-v5-contact-contacts-v-5.universal-CSsPpp2m.d.mts | AI (source-diff): Generated .d.ts type file with long lines, not obfuscated code. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Auto-generated internal Wix SDK package, not spam despite sparse metadata. | ai |
Versions (showing 11 of 11)
| Version | Deps | Published |
|---|---|---|
| 1.0.10 | 3 / 2 | |
| 1.0.9 | 3 / 2 | |
| 1.0.8 | 3 / 2 | |
| 1.0.7 | 3 / 2 | |
| 1.0.6 | 3 / 2 | |
| 1.0.5 | 3 / 2 | |
| 1.0.4 | 3 / 2 | |
| 1.0.3 | 3 / 2 | |
| 1.0.2 | 3 / 2 | |
| 1.0.1 | 3 / 2 | |
| 1.0.0 | 3 / 2 |
v1.0.10
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.9
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.8
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.7
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.6
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.5
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.4
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.3
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.2
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.