← Home

workbox-window

Simplifies communications with Workbox packages running in the service worker

39
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

gauntfacejeffposnickaddyosmaniphilipwaltontropicadriwestonrutertomayackhempeniusswissspidy

Keywords

workboxworkboxjsservice workerswwindowmessagepostMessage

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Legitimate transition between Google DevRel team members (tropicadri → tomayac). tomayac has strong npm track record (775 approved packages). ai
maintainer-change maintainer-added AI (maintainer-change): tomayac is a known Google Developer Advocate; addition reflects normal Google team rotation. ai
maintainer-change maintainer-removed AI (maintainer-change): snugug removal is part of normal Google team rotation on the Workbox project. ai
phantom-deps phantom-dep:@types/trusted-types AI (phantom-deps): TypeScript type declaration dependency; used for type-checking, not direct runtime import. ai

Versions (showing 39 of 39)

Version Deps Published
7.4.1 2 / 0
7.4.0 2 / 0
7.3.0 2 / 0
7.1.0 2 / 0
7.0.0 2 / 0
6.6.1 2 / 0
6.6.0 2 / 0
6.5.4 2 / 0
6.5.3 2 / 0
6.5.2 2 / 0
6.5.1 2 / 0
6.5.0 2 / 0
6.4.2 2 / 0
6.4.1 2 / 0
6.4.0 2 / 0
6.3.0 2 / 0
6.2.4 2 / 0
6.2.3 2 / 0
6.2.2 1 / 1
6.2.1 1 / 1
6.2.0 1 / 1
6.1.5 1 / 0
6.1.2 1 / 0
6.1.1 1 / 0
6.1.0 1 / 0
6.0.2 1 / 0
6.0.0 1 / 0
5.1.4 1 / 0
5.1.3 1 / 0
5.1.2 1 / 0
5.1.1 1 / 0
5.1.0 1 / 0
5.0.0 1 / 0
4.3.1 1 / 0
4.3.0 1 / 0
4.2.0 1 / 0
4.1.1 1 / 0
4.1.0 1 / 0
4.0.0 1 / 0