@wix/crm
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): Wix org regularly rotates team maintainers; wix-ci-publisher publishes, not individual maintainers. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Large-org team rotation; consistent with Wix's CI-driven publish pattern. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Auto-generated Wix SDK packages consistently lack descriptions and repo URLs; this is a known pattern for this publisher. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Wix auto-generated SDK packages routinely omit descriptions; stable false positive for this package family. | ai | |
| dependencies | unvetted-dep:@wix/crm_app-extensions | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_labels | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_pipelines | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @wix/crm is a legitimate Wix CRM SDK, not a typosquat of 'cors'; the levenshtein match is a false positive. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_extended-fields | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_submitted-contact | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_attachments | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_cards | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_notes | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_tasks | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai |
Versions (showing 51 of 1475)
| Version | Deps | Published |
|---|---|---|
| 1.0.1593 | 11 / 2 | |
| 1.0.1592 | 11 / 2 | |
| 1.0.1591 | 11 / 2 | |
| 1.0.1590 | 11 / 2 | |
| 1.0.1589 | 11 / 2 | |
| 1.0.1588 | 11 / 2 | |
| 1.0.1587 | 11 / 2 | |
| 1.0.1586 | 11 / 2 | |
| 1.0.1585 | 11 / 2 | |
| 1.0.1584 | 11 / 2 | |
| 1.0.1583 | 11 / 2 | |
| 1.0.1582 | 11 / 2 | |
| 1.0.1581 | 11 / 2 | |
| 1.0.1580 | 11 / 2 | |
| 1.0.1579 | 11 / 2 | |
| 1.0.1578 | 11 / 2 | |
| 1.0.1577 | 11 / 2 | |
| 1.0.1576 | 11 / 2 | |
| 1.0.1575 | 11 / 2 | |
| 1.0.1574 | 11 / 2 | |
| 1.0.1573 | 11 / 2 | |
| 1.0.1572 | 11 / 2 | |
| 1.0.1571 | 11 / 2 | |
| 1.0.1570 | 11 / 2 | |
| 1.0.1569 | 11 / 2 | |
| 1.0.1568 | 11 / 2 | |
| 1.0.1567 | 10 / 2 | |
| 1.0.1566 | 10 / 2 | |
| 1.0.1565 | 10 / 2 | |
| 1.0.1564 | 10 / 2 | |
| 1.0.1563 | 10 / 2 | |
| 1.0.1562 | 10 / 2 | |
| 1.0.1561 | 10 / 2 | |
| 1.0.1560 | 10 / 2 | |
| 1.0.1559 | 10 / 2 | |
| 1.0.1558 | 10 / 2 | |
| 1.0.1557 | 10 / 2 | |
| 1.0.1556 | 10 / 2 | |
| 1.0.1555 | 10 / 2 | |
| 1.0.1554 | 10 / 2 | |
| 1.0.1553 | 10 / 2 | |
| 1.0.1552 | 10 / 2 | |
| 1.0.1551 | 10 / 2 | |
| 1.0.1550 | 10 / 2 | |
| 1.0.1549 | 10 / 2 | |
| 1.0.1548 | 10 / 2 | |
| 1.0.1547 | 10 / 2 | |
| 1.0.1546 | 10 / 2 | |
| 1.0.1545 | 10 / 2 | |
| 1.0.1544 | 10 / 2 | |
| 1.0.1543 | 10 / 2 |
v1.0.1593
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1592
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1591
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1590
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1589
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1588
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1587
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1586
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1585
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1584
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1583
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1582
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1581
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1580
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1579
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1578
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1577
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1576
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1575
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1574
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1573
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1572
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1571
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1570
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1569
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1568
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1567
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1566
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.