@wix/auto_sdk_stores_catalog-versioning
51
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
wix-ciwixnpmwix-ambassadorwix-ci-publisherwix-bi-publisherusability-sessionsbryanp-wixethanpomriliwix-org-headlessfalconciroir-wix
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:build/es/meta.d.mts | AI (source-diff): Generated TypeScript declaration file; long lines are type imports, not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/meta.d.mts | AI (source-diff): Same pattern — generated .d.mts type declaration, not obfuscated executable code. | ai | |
| provenance | publisher-changed | AI (provenance): Wix internal CI publisher rotation; wix-ci-publisher has 1723 approved packages and is the canonical Wix CI publisher. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Wix auto-generated SDK package; templated name, no description/repo are expected for this package family. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Auto-generated SDK stub; missing description is consistent across this package family. | ai | |
| provenance | no-provenance | AI (provenance): Wix CI publisher does not attach Sigstore provenance; consistent across all approved Wix SDK packages. | ai |
Versions (showing 51 of 73)
| Version | Deps | Published |
|---|---|---|
| 1.0.73 | 3 / 2 | |
| 1.0.72 | 3 / 2 | |
| 1.0.71 | 3 / 2 | |
| 1.0.70 | 3 / 2 | |
| 1.0.69 | 3 / 2 | |
| 1.0.68 | 3 / 2 | |
| 1.0.67 | 3 / 2 | |
| 1.0.66 | 3 / 2 | |
| 1.0.65 | 3 / 2 | |
| 1.0.64 | 3 / 2 | |
| 1.0.63 | 3 / 2 | |
| 1.0.62 | 3 / 2 | |
| 1.0.61 | 3 / 2 | |
| 1.0.60 | 3 / 2 | |
| 1.0.59 | 2 / 2 | |
| 1.0.58 | 2 / 2 | |
| 1.0.57 | 2 / 2 | |
| 1.0.56 | 2 / 2 | |
| 1.0.55 | 2 / 2 | |
| 1.0.54 | 2 / 2 | |
| 1.0.53 | 2 / 2 | |
| 1.0.52 | 2 / 2 | |
| 1.0.51 | 2 / 2 | |
| 1.0.50 | 2 / 2 | |
| 1.0.49 | 2 / 2 | |
| 1.0.47 | 2 / 2 | |
| 1.0.46 | 2 / 2 | |
| 1.0.45 | 2 / 2 | |
| 1.0.44 | 2 / 2 | |
| 1.0.43 | 2 / 2 | |
| 1.0.42 | 2 / 2 | |
| 1.0.41 | 2 / 2 | |
| 1.0.40 | 2 / 2 | |
| 1.0.39 | 2 / 2 | |
| 1.0.38 | 2 / 2 | |
| 1.0.37 | 2 / 2 | |
| 1.0.36 | 2 / 2 | |
| 1.0.35 | 2 / 2 | |
| 1.0.34 | 2 / 2 | |
| 1.0.33 | 2 / 2 | |
| 1.0.32 | 2 / 2 | |
| 1.0.31 | 2 / 2 | |
| 1.0.30 | 2 / 2 | |
| 1.0.29 | 2 / 2 | |
| 1.0.28 | 2 / 2 | |
| 1.0.27 | 2 / 2 | |
| 1.0.26 | 2 / 2 | |
| 1.0.25 | 2 / 2 | |
| 1.0.24 | 2 / 2 | |
| 1.0.23 | 2 / 2 | |
| 1.0.22 | 2 / 2 |
v1.0.73
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.72
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.