@xapp/intelligent-search-widget
Intelligent Search Widget
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:store | AI (dependencies): store is a well-known localStorage wrapper, long-standing dep. | ai | |
| provenance | publisher-changed | AI (provenance): Change is to GitHub Actions CI publisher, consistent with automated release pipeline. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit TypeScript runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:store | AI (phantom-deps): store is a declared runtime dep used via config/bundled output; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:stentor-guards | AI (phantom-deps): stentor-guards is a declared runtime dep; phantom-dep heuristic false positive for this bundled package. | ai |
Versions (showing 92 of 92)
| Version | Deps | Published |
|---|---|---|
| 1.94.1 | 5 / 46 | |
| 1.94.0 | 5 / 46 | |
| 1.91.0 | 5 / 46 | |
| 1.88.0 | 5 / 46 | |
| 1.84.1 | 5 / 46 | |
| 1.84.0 | 5 / 46 | |
| 1.80.0 | 5 / 45 | |
| 1.79.1 | 5 / 45 | |
| 1.79.0 | 5 / 45 | |
| 1.78.0 | 5 / 45 | |
| 1.77.0 | 5 / 45 | |
| 1.76.1 | 5 / 45 | |
| 1.76.0 | 5 / 45 | |
| 1.75.0 | 5 / 45 | |
| 1.74.7 | 5 / 45 | |
| 1.74.6 | 5 / 45 | |
| 1.74.5 | 5 / 45 | |
| 1.74.4 | 5 / 45 | |
| 1.74.3 | 5 / 45 | |
| 1.74.1 | 5 / 45 | |
| 1.74.0 | 5 / 45 | |
| 1.73.0 | 5 / 45 | |
| 1.72.4 | 5 / 45 | |
| 1.72.3 | 5 / 45 | |
| 1.72.2 | 5 / 44 | |
| 1.72.1 | 5 / 44 | |
| 1.71.0 | 5 / 45 | |
| 1.65.9 | 5 / 45 | |
| 1.65.7 | 5 / 45 | |
| 1.65.6 | 5 / 45 | |
| 1.65.4 | 5 / 45 | |
| 1.65.3 | 5 / 45 | |
| 1.64.1 | 5 / 45 | |
| 1.64.0 | 5 / 45 | |
| 1.62.0 | 5 / 45 | |
| 1.61.0 | 5 / 45 | |
| 1.60.4 | 5 / 45 | |
| 1.57.3 | 5 / 45 | |
| 1.57.1 | 5 / 45 | |
| 1.54.2 | 5 / 45 | |
| 1.54.1 | 5 / 45 | |
| 1.54.0 | 5 / 45 | |
| 1.53.2 | 5 / 45 | |
| 1.53.1 | 5 / 45 | |
| 1.53.0 | 5 / 45 | |
| 1.52.4 | 5 / 45 | |
| 1.52.3 | 5 / 45 | |
| 1.50.1 | 5 / 45 | |
| 1.50.0 | 5 / 45 | |
| 1.49.5 | 5 / 45 | |
| 1.49.4 | 5 / 45 | |
| 1.49.3 | 5 / 45 | |
| 1.49.2 | 5 / 45 | |
| 1.49.1 | 5 / 45 | |
| 1.49.0 | 5 / 45 | |
| 1.48.0 | 5 / 45 | |
| 1.47.2 | 5 / 45 | |
| 1.47.0 | 5 / 45 | |
| 1.46.4 | 5 / 45 | |
| 1.46.3 | 5 / 45 | |
| 1.46.2 | 5 / 45 | |
| 1.46.1 | 5 / 45 | |
| 1.45.0 | 5 / 45 | |
| 1.44.0 | 5 / 45 | |
| 1.43.1 | 5 / 45 | |
| 1.43.0 | 5 / 45 | |
| 1.42.5 | 5 / 45 | |
| 1.42.4 | 5 / 45 | |
| 1.42.2 | 5 / 45 | |
| 1.42.1 | 5 / 45 | |
| 1.41.3 | 5 / 45 | |
| 1.41.2 | 5 / 45 | |
| 1.41.1 | 5 / 45 | |
| 1.41.0 | 5 / 45 | |
| 1.40.5 | 5 / 45 | |
| 1.40.4 | 5 / 45 | |
| 1.40.3 | 5 / 45 | |
| 1.40.2 | 5 / 45 | |
| 1.40.1 | 5 / 45 | |
| 1.40.0 | 5 / 45 | |
| 1.39.0 | 5 / 45 | |
| 1.38.1 | 5 / 45 | |
| 1.38.0 | 5 / 45 | |
| 1.37.4 | 5 / 45 | |
| 1.37.2 | 5 / 45 | |
| 1.37.0 | 5 / 45 | |
| 1.36.8 | 5 / 45 | |
| 1.36.7 | 5 / 45 | |
| 1.36.6 | 5 / 45 | |
| 1.36.5 | 4 / 45 | |
| 1.36.4 | 4 / 45 | |
| 1.36.3 | 4 / 45 |
v1.94.1
2 findingsThis version was published by a different npm account than previous versions on 2026-07-22. This could indicate a legitimate maintainer transition or an account compromise.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.91.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.79.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.78.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.77.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.76.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.76.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.75.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.74.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.73.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.72.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.72.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.72.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.72.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.71.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.65.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.65.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.64.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.62.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.61.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.60.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.57.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.57.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.54.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.54.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.54.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.52.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.52.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.50.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.49.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.48.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.47.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.46.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.45.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.44.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.43.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.43.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.42.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.42.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.42.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.42.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.41.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.41.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.41.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.41.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.40.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.40.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.40.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.40.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.40.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.40.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.39.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.38.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.38.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.37.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.37.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.37.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.36.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.36.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.36.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.36.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.36.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.36.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.