@wix/auto_sdk_ecom_order-transactions
1
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
wix-ciwixnpmwix-ambassadorwix-ci-publisherwix-bi-publisherusability-sessionsbryanp-wixydanivethanpwix-org-headlessfalconciroir-wix
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:build/internal/es/ecom-v1-order-transactions-order-transactions.universal-aENRFMbJ.d.mts | AI (source-diff): Long-line .d.mts files are tsup-generated TypeScript declaration re-exports; stable pattern for this Wix SDK package. | ai | |
| source-diff | obfuscated-file:build/cjs/ecom-v1-order-transactions-order-transactions.universal-DRvhf2o2.d.ts | AI (source-diff): CJS variant of the same tsup-generated declaration file; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/ecom-v1-order-transactions-order-transactions.universal-aENRFMbJ.d.ts | AI (source-diff): CJS variant of the same tsup-generated declaration file; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/ecom-v1-order-transactions-order-transactions.universal-DRvhf2o2.d.mts | AI (source-diff): Same tsup-generated declaration file pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/ecom-v1-order-transactions-order-transactions.universal-aENRFMbJ.d.ts | AI (source-diff): Long-line TypeScript declaration file; standard Wix SDK build artifact, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/ecom-v1-order-transactions-order-transactions.universal-aENRFMbJ.d.mts | AI (source-diff): Long-line TypeScript declaration file; standard Wix SDK build artifact, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/ecom-v1-order-transactions-order-transactions.universal-DRvhf2o2.d.mts | AI (source-diff): Long-line TypeScript declaration file; standard Wix SDK build artifact, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/ecom-v1-order-transactions-order-transactions.universal-DRvhf2o2.d.ts | AI (source-diff): Long-line TypeScript declaration file; standard Wix SDK build artifact, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/ecom-v1-order-transactions-order-transactions.universal-CQewkK3E.d.mts | AI (source-diff): Long-line .d.mts files are bundled TypeScript declaration re-exports, standard for Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/ecom-v1-order-transactions-order-transactions.universal-DgIVKgiJ.d.mts | AI (source-diff): Same pattern: bundled TS declaration re-exports, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/index.d.mts | AI (source-diff): Bundled TS declaration re-exports; stable pattern for this package family. | ai | |
| source-diff | obfuscated-file:build/internal/index.d.mts | AI (source-diff): Bundled TS declaration re-exports; stable pattern for this package family. | ai | |
| source-diff | obfuscated-file:build/internal/index.d.ts | AI (source-diff): Bundled TS declaration re-exports; stable pattern for this package family. | ai | |
| source-diff | obfuscated-file:build/index.d.ts | AI (source-diff): Bundled TS declaration re-exports; stable pattern for this package family. | ai | |
| source-diff | obfuscated-file:build/ecom-v1-order-transactions-order-transactions.universal-DgIVKgiJ.d.ts | AI (source-diff): Bundled TS declaration re-exports; stable pattern for this package family. | ai | |
| source-diff | obfuscated-file:build/internal/ecom-v1-order-transactions-order-transactions.universal-CQewkK3E.d.ts | AI (source-diff): Bundled TS declaration re-exports; stable pattern for this package family. | ai | |
| source-diff | obfuscated-file:build/es/meta.d.mts | AI (source-diff): TypeScript declaration file with long export lines; standard tsup output for large Wix SDK packages. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Routine Wix internal maintainer rotation consistent with CI-managed SDK packages. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Routine Wix internal maintainer rotation consistent with CI-managed SDK packages. | ai | |
| source-diff | obfuscated-file:build/es/index.d.mts | AI (source-diff): TypeScript declaration file with long export lines; standard tsup output for large Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/internal/es/index.d.mts | AI (source-diff): TypeScript declaration file with long export lines; standard tsup output for large Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/es/index.typings.d.mts | AI (source-diff): TypeScript declaration file with long export lines; standard tsup output for large Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/internal/es/index.typings.d.mts | AI (source-diff): TypeScript declaration file with long export lines; standard tsup output for large Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/internal/es/meta.d.mts | AI (source-diff): TypeScript declaration file with long export lines; standard tsup output for large Wix SDK packages. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to wix-ci-publisher is Wix's standard CI account with 1032 approved packages; stable pattern across Wix SDK packages. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Wix SDK auto-generated packages consistently omit descriptions; not a malice signal here. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Wix auto-generated SDK packages are intentionally templated with no description/repo; pattern is stable across this publisher's packages. | ai | |
| provenance | no-provenance | AI (provenance): Wix CI pipeline does not attach Sigstore provenance; consistent across all their SDK packages. | ai |
Versions (showing 1 of 101)
| Version | Deps | Published |
|---|---|---|
| 1.0.0 | 2 / 1 |
v1.0.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.