@wix/auto_sdk_stores_read-only-variants-v-3
8
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
yoavwix-cishahatawixnpmwix-ambassadorwix-ci-publisherwix-bi-publishergalil-teamusability-sessionsyurynixydanivmayacoamitde007haimbrum-wixyoungshinobiethanpshlomitc-wixarielhwix-org-headlessfalconcinadavlacroir-wixdorchaouat
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-BLnK7bTl.d.mts | AI (source-diff): Large .d.mts TypeScript declaration file with long lines from generated type definitions; not executable obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-BVbbWcjf.d.ts | AI (source-diff): Large .d.ts TypeScript declaration file with long lines from generated type definitions; not executable obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-BLnK7bTl.d.ts | AI (source-diff): Large .d.ts TypeScript declaration file with long lines from generated type definitions; not executable obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-BVbbWcjf.d.mts | AI (source-diff): Large .d.mts TypeScript declaration file with long lines from generated type definitions; not executable obfuscated code. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CgSVrIae.d.mts | AI (source-diff): TypeScript declaration file with long lines from complex type unions; readable JSDoc content, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CgSVrIae.d.ts | AI (source-diff): TypeScript declaration file with long lines from complex type unions; readable JSDoc content, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-BhYimHEe.d.ts | AI (source-diff): TypeScript declaration file with long lines from complex type unions; readable JSDoc content, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-BhYimHEe.d.mts | AI (source-diff): TypeScript declaration file with long lines from complex type unions; readable JSDoc content, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-DhqxV43r.d.mts | AI (source-diff): Generated TypeScript declaration file with long lines from type unions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-DhqxV43r.d.ts | AI (source-diff): Generated TypeScript declaration file with long lines from type unions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-BWl05dv4.d.ts | AI (source-diff): Generated TypeScript declaration file with long lines from type unions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-BWl05dv4.d.mts | AI (source-diff): Generated TypeScript declaration file with long lines from type unions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CEB6reGR.d.mts | AI (source-diff): Long-line TypeScript declaration files from Wix SDK codegen; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-o-qjRWP7.d.ts | AI (source-diff): Long-line TypeScript declaration files from Wix SDK codegen; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CEB6reGR.d.ts | AI (source-diff): Long-line TypeScript declaration files from Wix SDK codegen; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-o-qjRWP7.d.mts | AI (source-diff): Long-line TypeScript declaration files from Wix SDK codegen; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-Bzr5oXEa.d.mts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-Bzr5oXEa.d.ts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-B6vvkdMz.d.ts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-B6vvkdMz.d.mts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CmfOuHQ7.d.mts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CmfOuHQ7.d.ts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-B1rdilVM.d.ts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-B1rdilVM.d.mts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-DCMFkmPS.d.mts | AI (source-diff): Large .d.mts type declaration file with long lines from generated TypeScript types; not actual obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-C96yax26.d.mts | AI (source-diff): Large .d.mts type declaration file with long lines from generated TypeScript types; not actual obfuscation. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-C96yax26.d.ts | AI (source-diff): Large .d.ts type declaration file with long lines from generated TypeScript types; not actual obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-DCMFkmPS.d.ts | AI (source-diff): Large .d.ts type declaration file with long lines from generated TypeScript types; not actual obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-6yC0ejoi.d.mts | AI (source-diff): TypeScript declaration file with long lines from dense type definitions, not obfuscated code. Stable pattern for Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-cOyVMu7V.d.ts | AI (source-diff): TypeScript declaration file with long lines from dense type definitions, not obfuscated code. Stable pattern for Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-6yC0ejoi.d.ts | AI (source-diff): TypeScript declaration file with long lines from dense type definitions, not obfuscated code. Stable pattern for Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-cOyVMu7V.d.mts | AI (source-diff): TypeScript declaration file with long lines from dense type definitions, not obfuscated code. Stable pattern for Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CoUSBFoZ.d.mts | AI (source-diff): Long-line TypeScript declaration files from Wix SDK build pipeline; not obfuscated code. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Wix internal team rotation via known CI publisher; stable pattern across Wix SDK packages. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Wix internal team rotation via known CI publisher; stable pattern across Wix SDK packages. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CoUSBFoZ.d.ts | AI (source-diff): Long-line TypeScript declaration files from Wix SDK build pipeline; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-DHHbzvlL.d.mts | AI (source-diff): Same pattern: generated .d.mts with long lines; readable JSDoc content, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-DHHbzvlL.d.ts | AI (source-diff): Generated TypeScript declaration file; long lines from type unions, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-B4G2snUA.d.mts | AI (source-diff): Long-line TypeScript declaration file with readable JSDoc comments; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-B4G2snUA.d.ts | AI (source-diff): Long-line TypeScript declaration file with readable JSDoc comments; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CLm4D_cs.d.mts | AI (source-diff): Long-line TypeScript declaration file with readable JSDoc comments; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CLm4D_cs.d.ts | AI (source-diff): Long-line TypeScript declaration file with readable JSDoc comments; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CpQG0qBc.d.mts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CpQG0qBc.d.ts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CS_KYDkd.d.ts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CS_KYDkd.d.mts | AI (source-diff): TypeScript declaration file with long lines from dense JSDoc type definitions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:build/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CVSqB21b.d.mts | AI (source-diff): TypeScript declaration file with long lines from auto-generated type definitions; not executable obfuscated code. | ai | |
| source-diff | obfuscated-file:build/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CVSqB21b.d.ts | AI (source-diff): TypeScript declaration file with long lines from auto-generated type definitions; not executable obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/cjs/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CjZpSmUu.d.ts | AI (source-diff): TypeScript declaration file with long lines from auto-generated type definitions; not executable obfuscated code. | ai | |
| source-diff | obfuscated-file:build/internal/es/stores-catalog-v3-read-only-variant-read-only-variants-v-3.universal-CjZpSmUu.d.mts | AI (source-diff): TypeScript declaration file with long lines from auto-generated type definitions; not executable obfuscated code. | ai | |
| provenance | no-provenance | AI (provenance): Wix CI publisher does not attach Sigstore provenance; consistent across all approved versions. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Wix auto-generated SDK package; templated name, no description/repo are expected for this publisher's pattern. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Wix auto-generated SDK packages consistently lack descriptions; stable false positive for this publisher. | ai |
Versions (showing 8 of 108)
| Version | Deps | Published |
|---|---|---|
| 1.0.7 | 2 / 1 | |
| 1.0.6 | 2 / 1 | |
| 1.0.5 | 2 / 1 | |
| 1.0.4 | 2 / 1 | |
| 1.0.3 | 2 / 1 | |
| 1.0.2 | 2 / 1 | |
| 1.0.1 | 2 / 1 | |
| 1.0.0 | 2 / 1 |
v1.0.7
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.6
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.5
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.4
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.3
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.2
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.