@arco-iconbox/vue-smartcode
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:lib/IconLineTool/index.js | AI (source-diff): SVG path data inflates line length; standard icon-component build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:lib/IconColorDataFlow/index.js | AI (source-diff): Same pattern across icon library files. | ai | |
| source-diff | obfuscated-file:lib/IconColorCascade/index.js | AI (source-diff): Same icon component, CJS build variant. | ai | |
| source-diff | obfuscated-file:esm/IconColorCascade/index.js | AI (source-diff): Long SVG path-data string, not obfuscation; standard compiled Vue icon component. | ai | |
| source-diff | obfuscated-file:esm/IconLineApprovalTask/index.js | AI (source-diff): SVG path data, not code obfuscation; standard icon-library pattern. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Icon library monorepo package; sparse metadata is normal for this publisher's packages. | ai | |
| source-diff | obfuscated-file:lib/IconLinePrint/index.js | AI (source-diff): Long lines are inlined SVG path data in generated icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconIconLineLanguage/index.js | AI (source-diff): Long lines are SVG path data in Vite ESM build output, not obfuscation. Stable pattern for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconColorDoc/index.js | AI (source-diff): Long lines are SVG path data in Vue icon components, not obfuscation. Stable pattern for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconLineWorkFlow/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconLineEr/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconLineLanguage/index.js | AI (source-diff): Same SVG path data pattern; false positive for this icon package. | ai | |
| source-diff | obfuscated-file:esm/IconLinePrint/index.js | AI (source-diff): Same pattern: SVG path data in Vite-compiled Vue render function. | ai | |
| source-diff | obfuscated-file:lib/IconColorLogicFlow/index.js | AI (source-diff): CJS build of the same icon component; long lines are SVG path data. | ai | |
| source-diff | obfuscated-file:esm/IconLineTool/index.js | AI (source-diff): Same pattern: SVG path data in Vite-compiled Vue render function. | ai | |
| source-diff | obfuscated-file:esm/IconColorLogicFlow/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. Stable pattern for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconFillSetting/index.js | AI (source-diff): Long lines are SVG path coordinate data in Vite ESM build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconLineFolder/index.js | AI (source-diff): Same SVG path data pattern; false positive for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconLineFile/index.js | AI (source-diff): Same SVG path data pattern; false positive for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconLineExit/index.js | AI (source-diff): Same SVG path data pattern; false positive for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconLineCompany/index.js | AI (source-diff): Same SVG path data pattern; false positive for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconLineChart/index.js | AI (source-diff): Long lines are SVG path data in bundled Vue icon components, not obfuscation. Stable pattern for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconLineDownload/index.js | AI (source-diff): Same SVG path data pattern; false positive for this icon library. | ai | |
| source-diff | obfuscated-file:esm/IconLineGroup/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconFillDataExpansion/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue ESM icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:lib/IconColorHttp/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon component, not obfuscation. | ai | |
| source-diff | obfuscated-file:lib/IconColorFeishu/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon component, not obfuscation. | ai | |
| source-diff | obfuscated-file:lib/IconColorNotice/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon component, not obfuscation. | ai | |
| source-diff | obfuscated-file:lib/IconColorSql/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon component, not obfuscation. | ai | |
| source-diff | obfuscated-file:lib/IconLineAi/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon component, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconLineEnum/index.js | AI (source-diff): Long SVG path data in compiled Vue icon component; not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconLineFloat/index.js | AI (source-diff): Long SVG path data in compiled Vue icon component; not obfuscation. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase matches addition of ~232 new SVG icon components, not injected payload. | ai | |
| source-diff | obfuscated-file:esm/IconFillFx/index.js | AI (source-diff): Long lines are SVG path d= attributes in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Icon library; adding many new icon files per release is expected behavior. | ai | |
| source-diff | obfuscated-file:esm/IconLineAi/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconFillBranch/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconColorSqlserver/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconColorSql/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconColorPgsql/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconColorOpenai/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconColorNotice/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconColorMysql/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconColorHttp/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconColorFeishu/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconLineDebug/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm/IconLineCopy/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components, not obfuscation. | ai | |
| source-diff | obfuscated-file:lib/IconLineDingding/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components — standard build output for icon libraries. | ai | |
| source-diff | obfuscated-file:esm/IconLineSeal/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components — standard build output for icon libraries. | ai | |
| source-diff | obfuscated-file:esm/IconLineQiwei/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components — standard build output for icon libraries. | ai | |
| source-diff | obfuscated-file:esm/IconLineDingding/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components — standard build output for icon libraries. | ai | |
| source-diff | obfuscated-file:lib/IconLineSeal/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components — standard build output for icon libraries. | ai | |
| source-diff | obfuscated-file:lib/IconLineQiwei/index.js | AI (source-diff): Long lines are SVG path data in compiled Vue icon components — standard build output for icon libraries. | ai |
Versions (showing 96 of 96)
| Version | Deps | Published |
|---|---|---|
| 0.1.82 | 0 / 0 | |
| 0.1.81 | 0 / 0 | |
| 0.1.80 | 0 / 0 | |
| 0.1.79 | 0 / 0 | |
| 0.1.78 | 0 / 0 | |
| 0.1.77 | 0 / 0 | |
| 0.1.76 | 0 / 0 | |
| 0.1.75 | 0 / 0 | |
| 0.1.74 | 0 / 0 | |
| 0.1.65 | 0 / 0 | |
| 0.1.64 | 0 / 0 | |
| 0.1.63 | 0 / 0 | |
| 0.1.62 | 0 / 0 | |
| 0.1.60 | 0 / 0 | |
| 0.1.59 | 0 / 0 | |
| 0.1.58 | 0 / 0 | |
| 0.1.57 | 0 / 0 | |
| 0.1.56 | 0 / 0 | |
| 0.1.55 | 0 / 0 | |
| 0.1.54 | 0 / 0 | |
| 0.1.53 | 0 / 0 | |
| 0.1.52 | 0 / 0 | |
| 0.1.51 | 0 / 0 | |
| 0.1.50 | 0 / 0 | |
| 0.1.49 | 0 / 0 | |
| 0.1.47 | 0 / 0 | |
| 0.1.46 | 0 / 0 | |
| 0.1.45 | 0 / 0 | |
| 0.1.44 | 0 / 0 | |
| 0.1.43 | 0 / 0 | |
| 0.1.42 | 0 / 0 | |
| 0.1.41 | 0 / 0 | |
| 0.1.40 | 0 / 0 | |
| 0.1.39 | 0 / 0 | |
| 0.1.38 | 0 / 0 | |
| 0.1.37 | 0 / 0 | |
| 0.1.36 | 0 / 0 | |
| 0.1.35 | 0 / 0 | |
| 0.1.34 | 0 / 0 | |
| 0.1.33 | 0 / 0 | |
| 0.1.32 | 0 / 0 | |
| 0.1.31 | 0 / 0 | |
| 0.1.30 | 0 / 0 | |
| 0.1.29 | 0 / 0 | |
| 0.1.28 | 0 / 0 | |
| 0.1.27 | 0 / 0 | |
| 0.1.26 | 0 / 0 | |
| 0.1.25 | 0 / 0 | |
| 0.1.24 | 0 / 0 | |
| 0.1.23 | 0 / 0 | |
| 0.1.22 | 0 / 0 | |
| 0.1.21 | 0 / 0 | |
| 0.1.20 | 0 / 0 | |
| 0.1.19 | 0 / 0 | |
| 0.1.18 | 0 / 0 | |
| 0.1.17 | 0 / 0 | |
| 0.1.16 | 0 / 0 | |
| 0.1.15 | 0 / 0 | |
| 0.1.14 | 0 / 0 | |
| 0.1.13 | 0 / 0 | |
| 0.1.12 | 0 / 0 | |
| 0.1.11 | 0 / 0 | |
| 0.1.10 | 0 / 0 | |
| 0.1.9 | 0 / 0 | |
| 0.1.8 | 0 / 0 | |
| 0.1.7 | 0 / 0 | |
| 0.1.6 | 0 / 0 | |
| 0.1.5 | 0 / 0 | |
| 0.1.4 | 0 / 0 | |
| 0.1.3 | 0 / 0 | |
| 0.1.2 | 0 / 0 | |
| 0.0.25 | 0 / 0 | |
| 0.0.24 | 0 / 0 | |
| 0.0.23 | 0 / 0 | |
| 0.0.22 | 0 / 0 | |
| 0.0.21 | 0 / 0 | |
| 0.0.20 | 0 / 0 | |
| 0.0.19 | 0 / 0 | |
| 0.0.18 | 0 / 0 | |
| 0.0.17 | 0 / 0 | |
| 0.0.16 | 0 / 0 | |
| 0.0.15 | 0 / 0 | |
| 0.0.14 | 0 / 0 | |
| 0.0.13 | 0 / 0 | |
| 0.0.12 | 0 / 0 | |
| 0.0.11 | 0 / 0 | |
| 0.0.10 | 0 / 0 | |
| 0.0.9 | 0 / 0 | |
| 0.0.8 | 0 / 0 | |
| 0.0.7 | 0 / 0 | |
| 0.0.6 | 0 / 0 | |
| 0.0.5 | 0 / 0 | |
| 0.0.4 | 0 / 0 | |
| 0.0.3 | 0 / 0 | |
| 0.0.2 | 0 / 0 | |
| 0.0.1 | 0 / 0 |
v0.1.82
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.81
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.80
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.78
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.77
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.76
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.75
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.74
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.40
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.39
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.38
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.37
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.36
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.35
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.34
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.33
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.32
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.