@worknice/whiteboard
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-removed | AI (maintainer-change): Publisher change is within the same org; viniworknice confirmed as known maintainer on prior approved versions. | ai | |
| npm-metadata | url-dep:@worknice/commit-analyzer | AI (npm-metadata): Dev-only build tool from the same org (WorkniceHR); no runtime impact. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Internal org package; missing description is a stable pattern across versions. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established scoped package with 367 versions; metadata signals are false positives for this internal component library. | ai | |
| phantom-deps | phantom-dep:@rsbuild/plugin-mdx | AI (phantom-deps): Used in build config files, not directly imported in source — expected pattern for build plugins. | ai |
Versions (showing 100 of 150)
| Version | Deps | Published |
|---|---|---|
| 0.71.0 | 15 / 39 | |
| 0.70.0 | 15 / 39 | |
| 0.69.0 | 15 / 39 | |
| 0.68.1 | 15 / 39 | |
| 0.68.0 | 15 / 39 | |
| 0.67.3 | 15 / 39 | |
| 0.67.2 | 15 / 39 | |
| 0.67.1 | 15 / 39 | |
| 0.67.0 | 15 / 39 | |
| 0.66.1 | 15 / 39 | |
| 0.66.0 | 15 / 39 | |
| 0.65.0 | 15 / 39 | |
| 0.64.0 | 15 / 39 | |
| 0.63.0 | 15 / 39 | |
| 0.62.0 | 15 / 39 | |
| 0.61.0 | 15 / 39 | |
| 0.60.1 | 15 / 35 | |
| 0.60.0 | 15 / 35 | |
| 0.59.0 | 15 / 35 | |
| 0.58.0 | 15 / 35 | |
| 0.57.0 | 15 / 35 | |
| 0.56.0 | 15 / 35 | |
| 0.55.4 | 15 / 35 | |
| 0.55.3 | 15 / 35 | |
| 0.55.2 | 15 / 35 | |
| 0.55.1 | 15 / 35 | |
| 0.55.0 | 15 / 35 | |
| 0.54.0 | 15 / 35 | |
| 0.53.0 | 15 / 35 | |
| 0.52.1 | 15 / 35 | |
| 0.52.0 | 15 / 35 | |
| 0.51.0 | 15 / 35 | |
| 0.50.0 | 15 / 35 | |
| 0.23.3 | 15 / 37 | |
| 0.23.2 | 15 / 37 | |
| 0.23.1 | 15 / 37 | |
| 0.23.0 | 15 / 37 | |
| 0.22.6 | 14 / 31 | |
| 0.22.5 | 14 / 31 | |
| 0.22.4 | 14 / 31 | |
| 0.22.3 | 14 / 31 | |
| 0.22.2 | 14 / 31 | |
| 0.22.1 | 14 / 31 | |
| 0.22.0 | 14 / 31 | |
| 0.21.6 | 14 / 31 | |
| 0.21.5 | 14 / 31 | |
| 0.21.4 | 14 / 31 | |
| 0.21.3 | 14 / 31 | |
| 0.21.2 | 14 / 31 | |
| 0.21.1 | 14 / 31 | |
| 0.21.0 | 14 / 31 | |
| 0.20.0 | 14 / 31 | |
| 0.19.4 | 14 / 31 | |
| 0.19.3 | 14 / 31 | |
| 0.19.2 | 14 / 31 | |
| 0.19.1 | 14 / 31 | |
| 0.19.0 | 14 / 31 | |
| 0.18.5 | 14 / 31 | |
| 0.18.4 | 14 / 31 | |
| 0.16.21 | 14 / 31 | |
| 0.16.20 | 14 / 31 | |
| 0.16.19 | 14 / 31 | |
| 0.16.18 | 14 / 31 | |
| 0.16.17 | 14 / 31 | |
| 0.16.16 | 14 / 31 | |
| 0.16.15 | 14 / 31 | |
| 0.16.14 | 14 / 31 | |
| 0.16.13 | 14 / 31 | |
| 0.16.12 | 14 / 31 | |
| 0.16.11 | 14 / 31 | |
| 0.16.10 | 14 / 31 | |
| 0.16.9 | 14 / 31 | |
| 0.16.8 | 14 / 31 | |
| 0.16.7 | 14 / 31 | |
| 0.16.6 | 14 / 31 | |
| 0.16.5 | 14 / 31 | |
| 0.16.4 | 14 / 31 | |
| 0.16.3 | 14 / 31 | |
| 0.16.2 | 14 / 31 | |
| 0.16.1 | 14 / 31 | |
| 0.16.0 | 14 / 31 | |
| 0.15.3 | 14 / 31 | |
| 0.15.2 | 14 / 31 | |
| 0.15.1 | 14 / 31 | |
| 0.15.0 | 14 / 31 | |
| 0.14.0 | 14 / 30 | |
| 0.13.0 | 14 / 30 | |
| 0.12.11 | 14 / 30 | |
| 0.12.10 | 14 / 30 | |
| 0.12.9 | 14 / 30 | |
| 0.12.8 | 14 / 30 | |
| 0.12.7 | 14 / 30 | |
| 0.12.6 | 14 / 30 | |
| 0.12.5 | 14 / 30 | |
| 0.12.4 | 14 / 30 | |
| 0.12.3 | 14 / 30 | |
| 0.12.2 | 14 / 29 | |
| 0.12.0 | 14 / 29 | |
| 0.11.2 | 14 / 29 | |
| 0.11.1 | 14 / 29 |
v0.71.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.70.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.69.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.68.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.68.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.67.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.67.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.67.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.67.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.