← Home

@wix/auto_sdk_events_orders

npm
69
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

yoavwix-cishahatawixnpmwix-ambassadorwix-ci-publisherwix-bi-publishergalil-teamusability-sessionsyurynixydanivmayacoamitde007haimbrum-wixyoungshinobiethanpshlomitc-wixarielhwix-org-headlessfalconcinadavlacroir-wixdorchaouat

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:build/cjs/events-v1-order-orders.universal-BK8XPFRp.d.ts AI (source-diff): TypeScript declaration file with long re-export lines; standard Wix SDK build artifact, not obfuscation. ai
source-diff obfuscated-file:build/internal/cjs/events-v1-order-orders.universal-BK8XPFRp.d.ts AI (source-diff): TypeScript declaration file with long re-export lines; standard Wix SDK build artifact, not obfuscation. ai
source-diff obfuscated-file:build/internal/es/events-v1-order-orders.universal-BK8XPFRp.d.mts AI (source-diff): TypeScript declaration file with long re-export lines; standard Wix SDK build artifact, not obfuscation. ai
source-diff obfuscated-file:build/es/events-v1-order-orders.universal-BK8XPFRp.d.mts AI (source-diff): TypeScript declaration file with long re-export lines; standard Wix SDK build artifact, not obfuscation. ai
source-diff obfuscated-file:build/internal/es/meta.d.mts AI (source-diff): TypeScript declaration file with long import lines; standard output of Wix SDK auto-generation tooling. ai
source-diff obfuscated-file:build/es/meta.d.mts AI (source-diff): TypeScript declaration file with long import lines; standard output of Wix SDK auto-generation tooling. ai
source-diff obfuscated-file:build/es/index.typings.d.mts AI (source-diff): TypeScript declaration files with long type lines; not obfuscated code. Stable false positive for Wix SDK packages. ai
source-diff obfuscated-file:build/internal/es/index.typings.d.mts AI (source-diff): TypeScript declaration files with long type lines; not obfuscated code. Stable false positive for Wix SDK packages. ai
source-diff obfuscated-file:build/events-v1-order-orders.universal-C56YAmFe.d.ts AI (source-diff): TypeScript declaration file with long re-export lines from tsup build; not obfuscated code. ai
source-diff obfuscated-file:build/events-v1-order-orders.universal-C56YAmFe.d.mts AI (source-diff): TypeScript declaration file with long re-export lines from tsup build; not obfuscated code. ai
source-diff obfuscated-file:build/internal/events-v1-order-orders.universal-C56YAmFe.d.mts AI (source-diff): TypeScript declaration file with long re-export lines from tsup build; not obfuscated code. ai
source-diff obfuscated-file:build/index.d.mts AI (source-diff): TypeScript declaration file with long re-export lines from tsup build; not obfuscated code. ai
source-diff obfuscated-file:build/internal/index.d.mts AI (source-diff): TypeScript declaration file with long re-export lines from tsup build; not obfuscated code. ai
source-diff obfuscated-file:build/internal/events-v1-order-orders.universal-C56YAmFe.d.ts AI (source-diff): TypeScript declaration file with long re-export lines from tsup build; not obfuscated code. ai
source-diff obfuscated-file:build/index.d.ts AI (source-diff): TypeScript declaration file with long re-export lines from tsup build; not obfuscated code. ai
source-diff obfuscated-file:build/internal/index.d.ts AI (source-diff): TypeScript declaration file with long re-export lines from tsup build; not obfuscated code. ai
source-diff obfuscated-file:build/es/events-v1-order-orders.universal-C56YAmFe.d.mts AI (source-diff): Long lines are bundled TypeScript re-export declarations, not obfuscation. Stable pattern for Wix auto-SDK packages. ai
source-diff obfuscated-file:build/cjs/events-v1-order-orders.universal-C56YAmFe.d.ts AI (source-diff): Bundled CJS type declaration with long re-export lines; not obfuscation. ai
source-diff obfuscated-file:build/internal/cjs/events-v1-order-orders.universal-C56YAmFe.d.ts AI (source-diff): Same pattern; false positive for this Wix auto-SDK package. ai
source-diff obfuscated-file:build/internal/es/index.d.mts AI (source-diff): Same generated SDK type declaration pattern; false positive. ai
source-diff obfuscated-file:build/es/index.d.mts AI (source-diff): Long re-export lines in generated SDK type declarations; not obfuscation. ai
source-diff obfuscated-file:build/internal/es/events-v1-order-orders.universal-C56YAmFe.d.mts AI (source-diff): Same bundled TS declaration pattern; false positive for this package. ai
npm-metadata no-description AI (npm-metadata): Wix auto-generated SDK packages consistently omit descriptions; stable false positive. ai
provenance no-provenance AI (provenance): Wix CI publisher does not attach Sigstore provenance; consistent across all approved versions. ai
bogus-package bogus-package AI (bogus-package): Wix auto-generated SDK stub; templated name, no description/repo are expected for this package family. ai

Versions (showing 69 of 69)

Version Deps Published
1.0.68 3 / 2
1.0.67 3 / 2
1.0.66 3 / 2
1.0.65 3 / 2
1.0.64 3 / 2
1.0.63 2 / 2
1.0.62 2 / 2
1.0.61 2 / 2
1.0.60 2 / 2
1.0.59 2 / 2
1.0.58 2 / 2
1.0.57 2 / 2
1.0.56 2 / 2
1.0.55 2 / 2
1.0.54 2 / 2
1.0.53 2 / 2
1.0.52 2 / 2
1.0.51 2 / 2
1.0.50 2 / 2
1.0.49 2 / 2
1.0.48 2 / 2
1.0.47 2 / 2
1.0.46 2 / 2
1.0.45 2 / 2
1.0.44 2 / 2
1.0.43 2 / 2
1.0.42 2 / 2
1.0.41 2 / 2
1.0.40 2 / 2
1.0.39 2 / 2
1.0.38 2 / 2
1.0.37 2 / 2
1.0.36 2 / 2
1.0.35 2 / 2
1.0.34 2 / 2
1.0.33 2 / 2
1.0.32 2 / 2
1.0.31 2 / 2
1.0.30 2 / 2
1.0.29 2 / 2
1.0.28 2 / 2
1.0.27 2 / 2
1.0.26 2 / 2
1.0.25 2 / 2
1.0.24 2 / 2
1.0.23 2 / 2
1.0.22 2 / 2
1.0.21 2 / 2
1.0.20 2 / 2
1.0.19 2 / 2
1.0.18 2 / 2
1.0.17 2 / 1
1.0.16 2 / 1
1.0.15 2 / 1
1.0.14 2 / 1
1.0.13 2 / 1
1.0.12 2 / 1
1.0.11 2 / 1
1.0.10 2 / 2
1.0.9 2 / 2
1.0.8 2 / 2
1.0.7 2 / 1
1.0.6 2 / 1
1.0.5 2 / 1
1.0.4 2 / 1
1.0.3 2 / 1
1.0.2 2 / 1
1.0.1 2 / 1
1.0.0 2 / 1

v1.0.64

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.7

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.6

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.5

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.4

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.3

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.2

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.1

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.0

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.