← Home

rich-text-editor

npm Repository Homepage
13
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

eetu.ikonenvexterieerojantunenismomehdimaria.osualalnaalisvjwinter5villejokelaemsknocklinusw-rchrysalis-brobin.lundelljarkkoskytpejuamjan-aleksijerenurminenheikki.mantereogresoundsamuliheljomtreinikmplattu-mebntobiassonaateekoohennaakskoseeroan

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff encoded-string-file:dist/rich-text-editor-bundle.js AI (source-diff): Encoded strings are Unicode escapes in MathQuill bundled library documentation — not obfuscation. ai
phantom-deps phantom-dep:jquery AI (phantom-deps): jQuery is a declared peer dependency loaded by convention, not directly imported in source. ai
phantom-deps phantom-dep:@types/jquery AI (phantom-deps): Type-only package; framework-scoped, stable false positive for this package. ai
phantom-deps phantom-dep:@types/sanitize-html AI (phantom-deps): Type-only package; framework-scoped, stable false positive for this package. ai

Versions (showing 13 of 13)

Version Deps Published
8.11.2 7 / 25
8.11.0 7 / 25
8.10.5 7 / 25
8.10.4 7 / 25
8.10.3 7 / 25
8.10.2 7 / 25
8.10.1 7 / 25
8.10.0 7 / 25
8.9.1 7 / 25
8.9.0 7 / 25
8.0.2 9 / 23
8.0.1 9 / 23
8.0.0 9 / 23

v8.0.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.0.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.0.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.