rrweb-snapshot
rrweb's component to take a snapshot of DOM, aka DOM serializer
51
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
juice10yanzhen
Keywords
devtoolsproduct-analyticsreal-user-monitoringrrwebsnapshotDOM
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:base64-decode | AI (semgrep): Standard base64 utility in DOM serializer; not obfuscation. | ai | |
| phantom-deps | phantom-dep:postcss | AI (phantom-deps): postcss is declared in dependencies and used at runtime for CSS processing. | ai | |
| provenance | missing-githead | AI (provenance): Established package from trusted publisher (yanzhen, 175/0 track record) in the rrweb-io org. Missing gitHead reflects a publish environment change, not a security threat. | ai | |
| provenance | no-provenance | AI (provenance): Lack of Sigstore provenance is a process gap, not a security indicator, for this well-established package with a clean history. | ai |
Versions (showing 51 of 88)
| Version | Deps | Published |
|---|---|---|
| 2.1.1 | 1 / 13 | |
| 2.1.0 | 1 / 13 | |
| 2.0.1 | 1 / 13 | |
| 2.0.0 | 1 / 12 | |
| 1.1.14 | 0 / 18 | |
| 1.1.13 | 0 / 18 | |
| 1.1.12 | 0 / 18 | |
| 1.1.11 | 0 / 18 | |
| 1.1.10 | 0 / 18 | |
| 1.1.9 | 0 / 18 | |
| 1.1.8 | 0 / 18 | |
| 1.1.7 | 0 / 18 | |
| 1.1.6 | 0 / 18 | |
| 1.1.5 | 0 / 18 | |
| 1.1.4 | 0 / 18 | |
| 1.1.3 | 0 / 18 | |
| 1.1.2 | 0 / 18 | |
| 1.1.1 | 0 / 18 | |
| 1.1.0 | 0 / 18 | |
| 1.0.7 | 0 / 18 | |
| 1.0.6 | 0 / 18 | |
| 1.0.5 | 0 / 18 | |
| 1.0.4 | 0 / 18 | |
| 1.0.3 | 0 / 18 | |
| 1.0.2 | 0 / 18 | |
| 1.0.1 | 0 / 18 | |
| 1.0.0 | 0 / 18 | |
| 0.8.4 | 0 / 18 | |
| 0.8.3 | 0 / 16 | |
| 0.8.2 | 0 / 16 | |
| 0.8.1 | 0 / 16 | |
| 0.8.0 | 0 / 16 | |
| 0.7.29 | 0 / 16 | |
| 0.7.28 | 0 / 16 | |
| 0.7.27 | 0 / 16 | |
| 0.7.26 | 0 / 16 | |
| 0.7.25 | 0 / 16 | |
| 0.7.24 | 0 / 16 | |
| 0.7.23 | 0 / 16 | |
| 0.7.22 | 0 / 16 | |
| 0.7.21 | 0 / 16 | |
| 0.7.20 | 0 / 16 | |
| 0.7.19 | 0 / 16 | |
| 0.7.18 | 0 / 16 | |
| 0.7.17 | 0 / 16 | |
| 0.7.16 | 0 / 16 | |
| 0.7.15 | 0 / 16 | |
| 0.7.14 | 0 / 16 | |
| 0.7.13 | 0 / 16 | |
| 0.7.12 | 0 / 16 | |
| 0.7.11 | 0 / 16 |
v2.1.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.