← Home

@wix/auto_sdk_media_enterprise-media-items

npm
39
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

yoavwix-cishahatawixnpmwix-ambassadorwix-ci-publisherwix-bi-publishergalil-teamusability-sessionsyurynixdimarysk-wixydanivamitde007youngshinobiethanpshlomitc-wixarielhwix-org-headlessfalconcinadavlacroir-wixdorchaouat

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-removed AI (maintainer-change): Wix org SDK package; maintainer rotation is routine for large org CI-published packages. ai
maintainer-change maintainer-added AI (maintainer-change): Wix org SDK package; maintainer rotation is routine for large org CI-published packages. ai
source-diff obfuscated-file:build/es/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-BygimTZI.d.mts AI (source-diff): TypeScript declaration file with long lines from complex type unions; readable JSDoc content, not obfuscation. ai
source-diff obfuscated-file:build/internal/cjs/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-BygimTZI.d.ts AI (source-diff): TypeScript declaration file with long lines from complex type unions; readable JSDoc content, not obfuscation. ai
source-diff obfuscated-file:build/cjs/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-BygimTZI.d.ts AI (source-diff): TypeScript declaration file with long lines from complex type unions; readable JSDoc content, not obfuscation. ai
source-diff obfuscated-file:build/internal/es/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-BygimTZI.d.mts AI (source-diff): TypeScript declaration file with long lines from complex type unions; readable JSDoc content, not obfuscation. ai
source-diff obfuscated-file:build/cjs/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-CTY_TuDB.d.ts AI (source-diff): TypeScript declaration file with long lines from dense JSDoc; not executable obfuscation. Stable pattern for Wix auto-SDK packages. ai
source-diff obfuscated-file:build/es/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-CTY_TuDB.d.mts AI (source-diff): TypeScript declaration file with long lines from dense JSDoc; not executable obfuscation. Stable pattern for Wix auto-SDK packages. ai
source-diff obfuscated-file:build/internal/es/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-CTY_TuDB.d.mts AI (source-diff): TypeScript declaration file with long lines from dense JSDoc; not executable obfuscation. Stable pattern for Wix auto-SDK packages. ai
source-diff obfuscated-file:build/internal/cjs/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-CTY_TuDB.d.ts AI (source-diff): TypeScript declaration file with long lines from dense JSDoc; not executable obfuscation. Stable pattern for Wix auto-SDK packages. ai
npm-metadata no-description AI (npm-metadata): Wix CI-generated SDK stubs consistently omit descriptions; not a malice indicator for this publisher. ai
bogus-package bogus-package AI (bogus-package): Wix auto-generated SDK packages intentionally lack descriptions, repos, and keywords; templated naming is by design. ai
source-diff obfuscated-file:build/es/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-BJqWMcI-.d.mts AI (source-diff): Large TypeScript declaration file generated by Wix SDK tooling; long lines are type unions, not obfuscation. ai
source-diff obfuscated-file:build/internal/cjs/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-BJqWMcI-.d.ts AI (source-diff): Auto-generated internal CJS TypeScript declaration file; same pattern as above. ai
source-diff obfuscated-file:build/cjs/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-BJqWMcI-.d.ts AI (source-diff): Auto-generated CJS TypeScript declaration file; long lines are type definitions, not obfuscation. ai
source-diff obfuscated-file:build/internal/es/media-enterprise-public-media-v1-enterprise-item-enterprise-media-items.universal-BJqWMcI-.d.mts AI (source-diff): Same pattern: auto-generated .d.mts type declaration with long union types, not obfuscated code. ai

Versions (showing 39 of 39)

Version Deps Published
1.0.38 3 / 2
1.0.37 3 / 2
1.0.36 3 / 2
1.0.35 3 / 2
1.0.34 3 / 2
1.0.33 3 / 2
1.0.32 2 / 2
1.0.31 2 / 2
1.0.30 2 / 2
1.0.29 2 / 2
1.0.28 2 / 2
1.0.27 2 / 2
1.0.26 2 / 2
1.0.25 2 / 2
1.0.24 2 / 2
1.0.23 2 / 2
1.0.22 2 / 2
1.0.21 2 / 2
1.0.20 2 / 2
1.0.19 2 / 2
1.0.18 2 / 2
1.0.17 2 / 2
1.0.16 2 / 2
1.0.15 2 / 2
1.0.14 2 / 2
1.0.13 2 / 2
1.0.12 2 / 2
1.0.11 2 / 1
1.0.10 2 / 1
1.0.9 2 / 1
1.0.8 2 / 1
1.0.7 2 / 1
1.0.6 2 / 1
1.0.5 2 / 1
1.0.4 2 / 1
1.0.3 2 / 1
1.0.2 2 / 1
1.0.1 2 / 1
1.0.0 2 / 1

v1.0.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.