@xapp/intelligent-search-widget
Intelligent Search Widget
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:store | AI (dependencies): store is a well-known localStorage wrapper, long-standing dep. | ai | |
| provenance | publisher-changed | AI (provenance): Change is to GitHub Actions CI publisher, consistent with automated release pipeline. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit TypeScript runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:store | AI (phantom-deps): store is a declared runtime dep used via config/bundled output; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:stentor-guards | AI (phantom-deps): stentor-guards is a declared runtime dep; phantom-dep heuristic false positive for this bundled package. | ai |
Versions (showing 51 of 92)
| Version | Deps | Published |
|---|---|---|
| 1.94.1 | 5 / 46 | |
| 1.94.0 | 5 / 46 | |
| 1.91.0 | 5 / 46 | |
| 1.88.0 | 5 / 46 | |
| 1.84.1 | 5 / 46 | |
| 1.84.0 | 5 / 46 | |
| 1.80.0 | 5 / 45 | |
| 1.79.1 | 5 / 45 | |
| 1.79.0 | 5 / 45 | |
| 1.78.0 | 5 / 45 | |
| 1.77.0 | 5 / 45 | |
| 1.76.1 | 5 / 45 | |
| 1.76.0 | 5 / 45 | |
| 1.75.0 | 5 / 45 | |
| 1.74.7 | 5 / 45 | |
| 1.74.6 | 5 / 45 | |
| 1.74.5 | 5 / 45 | |
| 1.74.4 | 5 / 45 | |
| 1.74.3 | 5 / 45 | |
| 1.74.1 | 5 / 45 | |
| 1.74.0 | 5 / 45 | |
| 1.73.0 | 5 / 45 | |
| 1.72.4 | 5 / 45 | |
| 1.72.3 | 5 / 45 | |
| 1.72.2 | 5 / 44 | |
| 1.72.1 | 5 / 44 | |
| 1.71.0 | 5 / 45 | |
| 1.65.9 | 5 / 45 | |
| 1.65.7 | 5 / 45 | |
| 1.65.6 | 5 / 45 | |
| 1.65.4 | 5 / 45 | |
| 1.65.3 | 5 / 45 | |
| 1.64.1 | 5 / 45 | |
| 1.64.0 | 5 / 45 | |
| 1.62.0 | 5 / 45 | |
| 1.61.0 | 5 / 45 | |
| 1.60.4 | 5 / 45 | |
| 1.57.3 | 5 / 45 | |
| 1.57.1 | 5 / 45 | |
| 1.54.2 | 5 / 45 | |
| 1.54.1 | 5 / 45 | |
| 1.54.0 | 5 / 45 | |
| 1.53.2 | 5 / 45 | |
| 1.53.1 | 5 / 45 | |
| 1.53.0 | 5 / 45 | |
| 1.52.4 | 5 / 45 | |
| 1.52.3 | 5 / 45 | |
| 1.50.1 | 5 / 45 | |
| 1.50.0 | 5 / 45 | |
| 1.49.5 | 5 / 45 | |
| 1.49.4 | 5 / 45 |
v1.94.1
2 findingsThis version was published by a different npm account than previous versions on 2026-07-22. This could indicate a legitimate maintainer transition or an account compromise.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.91.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.78.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.77.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.76.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.76.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.75.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.73.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.72.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.72.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.72.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.72.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.71.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.65.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.62.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.61.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.60.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.57.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.57.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.54.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.54.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.54.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.52.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.52.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.