@wix/crm
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): Wix org regularly rotates team maintainers; wix-ci-publisher publishes, not individual maintainers. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Large-org team rotation; consistent with Wix's CI-driven publish pattern. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Auto-generated Wix SDK packages consistently lack descriptions and repo URLs; this is a known pattern for this publisher. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Wix auto-generated SDK packages routinely omit descriptions; stable false positive for this package family. | ai | |
| dependencies | unvetted-dep:@wix/crm_app-extensions | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_labels | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_pipelines | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @wix/crm is a legitimate Wix CRM SDK, not a typosquat of 'cors'; the levenshtein match is a false positive. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_extended-fields | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_submitted-contact | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_attachments | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_cards | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_notes | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai | |
| dependencies | unvetted-dep:@wix/auto_sdk_crm_tasks | AI (dependencies): Internal Wix sub-package from a trusted publisher with 1583 approved packages. | ai |
Versions (showing 100 of 1475)
| Version | Deps | Published |
|---|---|---|
| 1.0.1593 | 11 / 2 | |
| 1.0.1592 | 11 / 2 | |
| 1.0.1591 | 11 / 2 | |
| 1.0.1590 | 11 / 2 | |
| 1.0.1589 | 11 / 2 | |
| 1.0.1588 | 11 / 2 | |
| 1.0.1587 | 11 / 2 | |
| 1.0.1586 | 11 / 2 | |
| 1.0.1585 | 11 / 2 | |
| 1.0.1584 | 11 / 2 | |
| 1.0.1583 | 11 / 2 | |
| 1.0.1582 | 11 / 2 | |
| 1.0.1581 | 11 / 2 | |
| 1.0.1580 | 11 / 2 | |
| 1.0.1579 | 11 / 2 | |
| 1.0.1578 | 11 / 2 | |
| 1.0.1577 | 11 / 2 | |
| 1.0.1576 | 11 / 2 | |
| 1.0.1575 | 11 / 2 | |
| 1.0.1574 | 11 / 2 | |
| 1.0.1573 | 11 / 2 | |
| 1.0.1572 | 11 / 2 | |
| 1.0.1571 | 11 / 2 | |
| 1.0.1570 | 11 / 2 | |
| 1.0.1569 | 11 / 2 | |
| 1.0.1568 | 11 / 2 | |
| 1.0.1567 | 10 / 2 | |
| 1.0.1566 | 10 / 2 | |
| 1.0.1565 | 10 / 2 | |
| 1.0.1564 | 10 / 2 | |
| 1.0.1563 | 10 / 2 | |
| 1.0.1562 | 10 / 2 | |
| 1.0.1561 | 10 / 2 | |
| 1.0.1560 | 10 / 2 | |
| 1.0.1559 | 10 / 2 | |
| 1.0.1558 | 10 / 2 | |
| 1.0.1557 | 10 / 2 | |
| 1.0.1556 | 10 / 2 | |
| 1.0.1555 | 10 / 2 | |
| 1.0.1554 | 10 / 2 | |
| 1.0.1553 | 10 / 2 | |
| 1.0.1552 | 10 / 2 | |
| 1.0.1551 | 10 / 2 | |
| 1.0.1550 | 10 / 2 | |
| 1.0.1549 | 10 / 2 | |
| 1.0.1548 | 10 / 2 | |
| 1.0.1547 | 10 / 2 | |
| 1.0.1546 | 10 / 2 | |
| 1.0.1545 | 10 / 2 | |
| 1.0.1544 | 10 / 2 | |
| 1.0.1543 | 10 / 2 | |
| 1.0.1542 | 10 / 2 | |
| 1.0.1541 | 10 / 2 | |
| 1.0.1540 | 10 / 2 | |
| 1.0.1539 | 10 / 2 | |
| 1.0.1538 | 10 / 2 | |
| 1.0.1537 | 10 / 2 | |
| 1.0.1536 | 10 / 2 | |
| 1.0.1535 | 10 / 2 | |
| 1.0.1534 | 10 / 2 | |
| 1.0.1533 | 10 / 2 | |
| 1.0.1532 | 10 / 2 | |
| 1.0.1531 | 10 / 2 | |
| 1.0.1530 | 10 / 2 | |
| 1.0.1529 | 10 / 2 | |
| 1.0.1528 | 10 / 2 | |
| 1.0.1527 | 10 / 2 | |
| 1.0.1526 | 10 / 2 | |
| 1.0.1525 | 10 / 2 | |
| 1.0.1524 | 10 / 2 | |
| 1.0.1523 | 10 / 2 | |
| 1.0.1522 | 10 / 2 | |
| 1.0.1521 | 10 / 2 | |
| 1.0.1520 | 10 / 2 | |
| 1.0.1519 | 10 / 2 | |
| 1.0.1518 | 10 / 2 | |
| 1.0.1517 | 10 / 2 | |
| 1.0.1516 | 10 / 2 | |
| 1.0.1515 | 10 / 2 | |
| 1.0.1514 | 10 / 2 | |
| 1.0.1513 | 10 / 2 | |
| 1.0.1512 | 10 / 2 | |
| 1.0.1511 | 10 / 2 | |
| 1.0.1510 | 10 / 2 | |
| 1.0.1509 | 10 / 2 | |
| 1.0.1508 | 10 / 2 | |
| 1.0.1507 | 10 / 2 | |
| 1.0.1506 | 10 / 2 | |
| 1.0.1505 | 10 / 2 | |
| 1.0.1504 | 10 / 2 | |
| 1.0.1503 | 10 / 2 | |
| 1.0.1502 | 10 / 2 | |
| 1.0.1501 | 10 / 2 | |
| 1.0.1500 | 10 / 2 | |
| 1.0.1499 | 10 / 2 | |
| 1.0.1498 | 9 / 2 | |
| 1.0.1497 | 9 / 2 | |
| 1.0.1496 | 8 / 2 | |
| 1.0.1495 | 8 / 2 | |
| 1.0.1494 | 8 / 2 |
v1.0.1593
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1592
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1591
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1590
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1589
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1588
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1587
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1586
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1585
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1584
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1583
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1582
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1581
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1580
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1579
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1578
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1577
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1576
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1575
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1574
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1573
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1572
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1571
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1570
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1569
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1568
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1567
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1566
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1525
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1524
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1523
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1522
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1521
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1520
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1519
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1518
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1517
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1516
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1515
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1514
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1513
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1512
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1511
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1510
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1509
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1508
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.0.1507
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1506
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1505
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1504
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1503
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1502
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1501
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1500
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1499
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1498
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1497
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1495
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1494
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.