@arco-iconbox/react-coze-coding
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:cjs/IconBinary/index.d.ts | AI (source-diff): Long-line TypeScript Pick<> union of SVG props is normal icon-library codegen, not obfuscation. | ai | |
| source-diff | obfuscated-file:cjs/IconBrowser/index.d.ts | AI (source-diff): Same codegen pattern as IconBinary; stable false positive for this icon package. | ai | |
| source-diff | obfuscated-file:cjs/IconDocument/index.d.ts | AI (source-diff): Same codegen pattern; stable false positive for this icon package. | ai | |
| source-diff | obfuscated-file:cjs/IconShare/index.js | AI (source-diff): Long lines are inlined SVG path data in a compiled icon component, not obfuscation. Stable pattern for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconShare/index.js | AI (source-diff): Same as cjs variant — SVG path data in compiled ESM icon component. | ai | |
| source-diff | obfuscated-file:umd/IconShare/index.js | AI (source-diff): Same as cjs/esm variants — SVG path data in compiled UMD icon component. | ai | |
| source-diff | obfuscated-file:esm/IconOnline/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | obfuscated-file:esm/IconWechat/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | obfuscated-file:umd/IconLark/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | obfuscated-file:umd/IconNotion/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | obfuscated-file:cjs/IconLark/index.d.ts | AI (source-diff): Long-line .d.ts files are generated TypeScript declarations with exhaustive SVG prop unions; not obfuscation. | ai | |
| source-diff | obfuscated-file:umd/IconWechat/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New files are icon components; growth is proportional to adding new icons, not injected payloads. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by adding 4 new icon components each with cjs/esm/umd variants and .d.ts files. | ai | |
| source-diff | obfuscated-file:umd/IconOnline/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | obfuscated-file:cjs/IconNotion/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | obfuscated-file:cjs/IconOnline/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | obfuscated-file:cjs/IconWechat/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | obfuscated-file:esm/IconLark/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai | |
| source-diff | obfuscated-file:esm/IconNotion/index.d.ts | AI (source-diff): Same generated .d.ts pattern as other icon components in this package. | ai |
Versions (showing 36 of 36)
| Version | Deps | Published |
|---|---|---|
| 0.0.46 | 0 / 0 | |
| 0.0.45 | 0 / 0 | |
| 0.0.44 | 0 / 0 | |
| 0.0.43 | 0 / 0 | |
| 0.0.42 | 0 / 0 | |
| 0.0.41 | 0 / 0 | |
| 0.0.40 | 0 / 0 | |
| 0.0.39 | 0 / 0 | |
| 0.0.38 | 0 / 0 | |
| 0.0.37 | 0 / 0 | |
| 0.0.36 | 0 / 0 | |
| 0.0.35 | 0 / 0 | |
| 0.0.34 | 0 / 0 | |
| 0.0.33 | 0 / 0 | |
| 0.0.31 | 0 / 0 | |
| 0.0.30 | 0 / 0 | |
| 0.0.29 | 0 / 0 | |
| 0.0.28 | 0 / 0 | |
| 0.0.27 | 0 / 0 | |
| 0.0.26 | 0 / 0 | |
| 0.0.25 | 0 / 0 | |
| 0.0.24 | 0 / 0 | |
| 0.0.23 | 0 / 0 | |
| 0.0.22 | 0 / 0 | |
| 0.0.21 | 0 / 0 | |
| 0.0.20 | 0 / 0 | |
| 0.0.19 | 0 / 0 | |
| 0.0.18 | 0 / 0 | |
| 0.0.17 | 0 / 0 | |
| 0.0.16 | 0 / 0 | |
| 0.0.15 | 0 / 0 | |
| 0.0.5 | 0 / 0 | |
| 0.0.4 | 0 / 0 | |
| 0.0.3 | 0 / 0 | |
| 0.0.2 | 0 / 0 | |
| 0.0.1 | 0 / 0 |
v0.0.46
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.45
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.44
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.43
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.42
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.41
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.40
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.39
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.38
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.