@arbidocs/sdk
Shared operations layer for ARBI — auth, config, SSE, WebSocket, and API operations
27
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
arbi-dev
Keywords
arbicoreoperationsapitypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/browser-BbUObdvG.d.cts | AI (source-diff): TypeScript declaration file with long doc comments, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-BbUObdvG.d.ts | AI (source-diff): TypeScript declaration file with long doc comments, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-Bq64bPkc.d.cts | AI (source-diff): TypeScript declaration file with long doc comments, not obfuscated executable code. | ai | |
| source-diff | obfuscated-file:dist/browser-Bq64bPkc.d.ts | AI (source-diff): TypeScript declaration file with long doc comments, not obfuscated executable code. | ai | |
| source-diff | obfuscated-file:dist/browser-T0w0nU41.d.cts | AI (source-diff): TS declaration file flagged by line-length heuristic; plain readable type defs, not code. | ai | |
| source-diff | obfuscated-file:dist/browser-T0w0nU41.d.ts | AI (source-diff): TS declaration file flagged by line-length heuristic; plain readable type defs, not code. | ai | |
| source-diff | obfuscated-file:dist/browser-BUspHdyk.d.ts | AI (source-diff): Type declaration file (.d.ts) with readable JSDoc; long-line heuristic false positive. | ai | |
| source-diff | obfuscated-file:dist/browser-BUspHdyk.d.cts | AI (source-diff): Type declaration file (.d.cts) with readable JSDoc; long-line heuristic false positive. | ai | |
| source-diff | obfuscated-file:dist/browser-DepiVl-4.d.ts | AI (source-diff): Type declaration file, not executable obfuscated code; long lines are generated .d.ts output. | ai | |
| source-diff | obfuscated-file:dist/browser-DepiVl-4.d.cts | AI (source-diff): Type declaration file, not executable obfuscated code; long lines are generated .d.ts output. | ai | |
| source-diff | obfuscated-file:dist/browser-CxTSIAhf.d.ts | AI (source-diff): Generated TypeScript declaration file, long lines not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser-CxTSIAhf.d.cts | AI (source-diff): Generated TypeScript declaration file, long lines not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser-BS_k043E.d.cts | AI (source-diff): Declaration file with long lines from many type exports, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-BS_k043E.d.ts | AI (source-diff): Declaration file with long lines from many type exports, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-B5b3SDW6.d.ts | AI (source-diff): TypeScript declaration file with long type unions, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-B5b3SDW6.d.cts | AI (source-diff): TypeScript declaration file with long type unions, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-DgApY8QV.d.cts | AI (source-diff): Generated TypeScript declaration file, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-DgApY8QV.d.ts | AI (source-diff): Generated TypeScript declaration file, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-C4gqnXaX.d.ts | AI (source-diff): Type declaration file, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-C4gqnXaX.d.cts | AI (source-diff): Type declaration file, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/browser-DYnkgkmL.d.cts | AI (source-diff): Long lines are TypeScript declaration types, not obfuscated executable code. | ai | |
| source-diff | obfuscated-file:dist/browser-DYnkgkmL.d.ts | AI (source-diff): Long lines are TypeScript declaration types, not obfuscated executable code. | ai | |
| source-diff | obfuscated-file:dist/browser-NpucdgQ1.d.ts | AI (source-diff): Large .d.ts type-declaration file, not executable obfuscated code. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): Established high-frequency publisher with 120 versions; benign release cadence. | ai | |
| source-diff | obfuscated-file:dist/browser-NpucdgQ1.d.cts | AI (source-diff): Large .d.cts type-declaration file, not executable obfuscated code. | ai | |
| source-diff | encoded-string-file:dist/browser.cjs | AI (source-diff): Base64-encoded libsodium WASM binary data; crypto primitive names visible in decoded content confirm legitimacy. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by bundling libsodium WASM binary; consistent with crypto SDK adding native crypto support. | ai | |
| source-diff | encoded-string-file:dist/index.js | AI (source-diff): Same libsodium WASM bundle pattern. | ai | |
| source-diff | encoded-string-file:dist/browser.js | AI (source-diff): Same libsodium WASM bundle pattern. | ai | |
| source-diff | encoded-string-file:dist/index.cjs | AI (source-diff): Same libsodium WASM bundle pattern as browser.cjs. | ai | |
| provenance | no-provenance | AI (provenance): Small SDK package; provenance absence is a process gap, not a security signal for this package. | ai |
Versions (showing 27 of 127)
| Version | Deps | Published |
|---|---|---|
| 0.3.26 | 2 / 5 | |
| 0.3.25 | 2 / 5 | |
| 0.3.24 | 2 / 5 | |
| 0.3.23 | 2 / 5 | |
| 0.3.22 | 2 / 5 | |
| 0.3.21 | 2 / 5 | |
| 0.3.20 | 2 / 5 | |
| 0.3.19 | 2 / 5 | |
| 0.3.18 | 2 / 5 | |
| 0.3.17 | 2 / 5 | |
| 0.3.16 | 2 / 5 | |
| 0.3.15 | 2 / 5 | |
| 0.3.14 | 2 / 5 | |
| 0.3.13 | 2 / 5 | |
| 0.3.11 | 1 / 5 | |
| 0.3.10 | 1 / 5 | |
| 0.3.9 | 2 / 5 | |
| 0.3.8 | 2 / 5 | |
| 0.3.7 | 2 / 5 | |
| 0.3.6 | 2 / 5 | |
| 0.3.5 | 2 / 5 | |
| 0.3.4 | 2 / 5 | |
| 0.3.3 | 2 / 5 | |
| 0.3.2 | 2 / 5 | |
| 0.3.1 | 2 / 5 | |
| 0.3.0 | 2 / 5 | |
| 0.1.0 | 2 / 5 |
v0.3.26
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.25
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.24
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.23
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.22
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.21
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.20
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.