livekit-client
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/livekit-client.fm.worker.js | AI (source-diff): Rollup-bundled worker output; minification is expected for dist files in this package. | ai | |
| source-diff | obfuscated-file:dist/livekit-client.pt.worker.js | AI (source-diff): Rollup-bundled worker output; minification is expected for this package's dist files. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New packet-trailer worker entry point with source maps; expected for new export. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is explicitly declared in dependencies; phantom-dep fires incorrectly here. | ai |
Versions (showing 26 of 26)
| Version | Deps | Published |
|---|---|---|
| 2.21.0 | 9 / 48 | |
| 2.20.2 | 9 / 48 | |
| 2.20.1 | 9 / 45 | |
| 2.20.0 | 9 / 45 | |
| 2.19.2 | 9 / 45 | |
| 2.19.1 | 9 / 45 | |
| 2.19.0 | 9 / 44 | |
| 2.18.10 | 9 / 44 | |
| 2.18.9 | 9 / 44 | |
| 2.18.8 | 9 / 44 | |
| 2.18.7 | 9 / 44 | |
| 2.18.6 | 9 / 44 | |
| 2.18.5 | 9 / 44 | |
| 2.18.4 | 9 / 44 | |
| 2.18.3 | 9 / 44 | |
| 2.18.2 | 9 / 44 | |
| 2.18.1 | 9 / 44 | |
| 2.18.0 | 9 / 44 | |
| 2.17.3 | 9 / 42 | |
| 2.17.2 | 10 / 42 | |
| 2.17.1 | 10 / 42 | |
| 2.17.0 | 10 / 41 | |
| 2.16.1 | 10 / 41 | |
| 2.16.0 | 10 / 37 | |
| 2.15.16 | 10 / 37 | |
| 2.15.15 | 10 / 37 |
v2.21.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.20.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.20.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.18.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.17.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.17.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.17.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.17.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.16.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.16.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.15.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.15.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.