Large inventories load in smaller steps. Organization inventory and package search finish reading every accessible page before showing complete search results, groups, and totals. Compliance summaries and Before merge readiness are built from complete inputs. Both selected lanes must finish before a merge-ready result appears. When something changes, these views and the organization inventory keep their last complete result on screen and bring it up to date about a second after the changes stop, or once packages that are still being checked are done. License advisories load separately from the project inventory. Loading or an error is never a clean advisory result, and Retry checks the current data again.
Inventory, Compliance, and Activity in the sidebar give org-wide visibility without opening every project. Activity consolidates the project change log across the organization for admins and owners.
Inventory page
- Lists every component across all projects, grouped by package name and version.
- Filter by search, project, or review status (Needs review, Awaiting, Approved).
- Jump to a component or filter the project table by license from the row menu.
- A package you marked as your own carries an Internal badge. It stays in your inventory and is left out of your public page and your exports. See Help center → Internal packages (Internal packages).
A review a person made is remembered for your whole organization, so the same package version in another project or on another branch arrives already decided. See Help center → Reviews we remember (Reviews we remember).
Activity page
- Shows the same events as each project's Activity tab, across every project in the organization. Security-monitoring events stay on the Security tab for roles that can view them.
- Filter by project, person, or a custom date range (clear the range for all time). Sort the table by When, Event, Project, or Person.
- Visible to organization admins and owners. Editors and viewers keep using the per-project Activity tab.
Change column
A project's package table has a Change column showing what happened to each package since you last reviewed it, so a sync's counts are easy to verify at a glance.
- Added: a brand-new package.
- Updated: the version went up (shown as 0.40.2 to 0.41.4).
- Downgraded: the version went down.
- Removed: the package is gone from the lockfile. It is kept and flagged for review, excluded from your published page, and never deleted silently. It cannot be approved; use Remove from inventory in the Review walkthrough or on the package page, and publishing the page also drops packages that had left the lockfile.
Added, Updated, and Downgraded packages reopen for review. The change marker clears once you approve the package, which sets its current version as the new reviewed baseline. Re-importing the same exact artifact with unchanged license inputs keeps its saved review. A genuine contradiction reopens the package exactly once. Repeating the same mismatch, modified, or proprietary verdict does not erase reviewer text, acknowledgements, or approval. If a package changes twice before you review it, the Change column shows the whole span from your last reviewed version.
Compliance page
- Summary cards: Total projects, ready to publish, blocked, and unpublished drift.
- Per-project table: Health grade, live vs total components, publish state, and last publish date.
- Click a row to open that project's detail page.