@artel/artc — Greenflagged

Артель Компилятор | Artel Compiler

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

ychetyrko

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	net-exec-file:build/chunk-Z3MD24QH.js	AI (source-diff): Compiler package; large build chunks with network+exec patterns are expected bundled output, not malware.	ai	2026/06/16
source-diff	net-exec-file:build/chunk-5A2UZDNX.js	AI (source-diff): Compiler package legitimately bundles network+exec patterns; build artifacts are expected large chunks.	ai	2026/06/16
source-diff	net-exec-file:build/chunk-PPQK5MBM.js	AI (source-diff): Compiler bundle; network+exec pattern reflects bundled Babel/TS transpiler code, not malware dropper.	ai	2026/06/16
source-diff	net-exec-file:build/chunk-TMFKLPML.js	AI (source-diff): Bundled build artifact with standard decorator/async boilerplate; no actual network+exec payload in the compiler's output files.	ai	2026/06/16
source-diff	net-exec-file:build/chunk-GZUU2AYH.js	AI (source-diff): Bundled compiler output; network+exec pattern is from legitimate build tooling, not dropper behavior.	ai	2026/06/16
source-diff	net-exec-file:build/chunk-S7CAJWX2.js	AI (source-diff): Bundled build artifact with standard transpiler boilerplate; not malware for this compiler package.	ai	2026/06/16
source-diff	net-exec-file:build/chunk-WTJNZUBE.js	AI (source-diff): Standard esbuild bundle with decorator/async helpers; no actual network fetch or dynamic eval present.	ai	2026/06/15
source-diff	net-exec-file:build/chunk-KJOZ6YIN.js	AI (source-diff): Compiler/transpiler package; bundled Babel runtime with network+exec patterns is expected behavior for this tool.	ai	2026/06/15
source-diff	net-exec-file:build/chunk-66RH6JKB.js	AI (source-diff): Build artifact with standard bundler boilerplate; no actual network/eval payload visible in sample.	ai	2026/06/15
source-diff	net-exec-file:build/chunk-IQ4WP3GU.js	AI (source-diff): Compiler package; bundled chunk contains standard esbuild/TS boilerplate, not dropper code.	ai	2026/06/15
source-diff	net-exec-file:build/chunk-RKCSFKQS.js	AI (source-diff): Compiler build bundle; network+exec pattern is from bundled compiler/LSP code, not malware.	ai	2026/06/14
source-diff	net-exec-file:build/chunk-PK5WTR7M.js	AI (source-diff): 3MB bundled compiler artifact; sample shows only standard TS/decorator build helpers, no actual network or eval calls.	ai	2026/06/14
source-diff	net-exec-file:build/chunk-LGYFTSDE.js	AI (source-diff): Bundled compiler output; network+exec pattern is from bundler boilerplate, not dropper code.	ai	2026/06/14
source-diff	net-exec-file:build/chunk-BAAUJYMH.js	AI (source-diff): Bundled esbuild output for a compiler tool; network+exec pattern is from the compiler's own functionality, not dropper behavior.	ai	2026/06/14
source-diff	net-exec-file:build/chunk-G4UMALLG.js	AI (source-diff): Build artifact with standard esbuild/TS boilerplate; no actual malicious network+exec pattern present.	ai	2026/06/14
source-diff	net-exec-file:build/chunk-ATYKWZ5R.js	AI (source-diff): Bundled esbuild output for a compiler package; network+exec pattern is standard transpiled async/decorator code, not malware.	ai	2026/06/14
source-diff	net-exec-file:build/chunk-YAYSHO33.js	AI (source-diff): Standard bundled build artifact from esbuild/rollup; transpilation boilerplate, not dropper code.	ai	2026/06/14
source-diff	net-exec-file:build/chunk-T4JAN46C.js	AI (source-diff): Bundled esbuild output for a compiler package; network+exec pattern is expected and the sample shows only transpilation boilerplate.	ai	2026/06/13
source-diff	net-exec-file:build/chunk-LV35QVOW.js	AI (source-diff): Build artifact with standard esbuild/TS boilerplate; no actual network+exec payload present.	ai	2026/06/13
source-diff	net-exec-file:build/chunk-CQLARM2U.js	AI (source-diff): Bundled build artifact with standard TS/esbuild boilerplate; network+exec pattern is from the compiler's legitimate runtime, not dropper code.	ai	2026/06/13
source-diff	net-exec-file:build/chunk-6JA436J2.js	AI (source-diff): Bundled compiler output (esbuild); network+exec pattern is from legitimate async/Promise boilerplate, not dropper malware.	ai	2026/06/12
source-diff	net-exec-file:build/chunk-YD2DEVJP.js	AI (source-diff): Large bundled build artifact for a compiler tool; network+exec pattern reflects Babel/TS bundling, not dropper behavior.	ai	2026/06/12
source-diff	net-exec-file:build/chunk-A5H2QLXZ.js	AI (source-diff): Large bundled build artifact from esbuild; network+exec pattern is from bundled compiler/LSP code, not malware.	ai	2026/06/11
source-diff	net-exec-file:build/chunk-Y23FSWAN.js	AI (source-diff): File contains standard bundler helper boilerplate (decorators, async wrappers), not malicious network+exec patterns.	ai	2026/06/11
source-diff	net-exec-file:build/chunk-OB2WGYLS.js	AI (source-diff): Build bundle with standard esbuild/TS decorator boilerplate; network+exec pattern is from the compiler's legitimate runtime, not dropper code.	ai	2026/06/11
source-diff	net-exec-file:build/chunk-F62D5WPV.js	AI (source-diff): Compiler/language-server bundle; network+exec pattern is expected in a bundled compiler tool, not malware.	ai	2026/06/11
source-diff	net-exec-file:build/chunk-PGJQFLPG.js	AI (source-diff): Bundled compiler artifact; network+exec pattern is from bundled TS helpers, not malicious code.	ai	2026/06/11
source-diff	net-exec-file:build/chunk-2SRNQ3Z6.js	AI (source-diff): Bundled compiler output; network+exec pattern is from legitimate build tooling, not dropper malware.	ai	2026/06/11
source-diff	net-exec-file:build/chunk-GDTFOV2M.js	AI (source-diff): Compiler package bundles Babel; network+exec pattern is from bundled toolchain code, not malware.	ai	2026/06/10
source-diff	net-exec-file:build/chunk-U3H2CT4J.js	AI (source-diff): Compiler package; large bundled build artifacts with network+exec patterns are expected for a language compiler/LSP tool.	ai	2026/06/10
source-diff	net-exec-file:build/chunk-OQEIE4GQ.js	AI (source-diff): Bundled compiler output; network+exec pattern is from bundler boilerplate, not malware.	ai	2026/06/10
source-diff	net-exec-file:build/chunk-VVFLEWSA.js	AI (source-diff): Compiler/language-server bundle; network+exec pattern is inherent to the package's purpose, not malware.	ai	2026/06/09
source-diff	net-exec-file:build/chunk-XARNKP3Q.js	AI (source-diff): Build artifact from a compiler package; sample shows standard transpiler boilerplate, not dropper/loader code.	ai	2026/06/09
source-diff	net-exec-file:build/chunk-RIWU6SF4.js	AI (source-diff): Build bundle for a compiler package; sample shows TS transpilation boilerplate, not malicious dropper code.	ai	2026/06/09
source-diff	net-exec-file:build/chunk-CGOSDN2E.js	AI (source-diff): Bundled compiler output; boilerplate helpers only in sample, no malicious net/exec pattern.	ai	2026/06/08
source-diff	net-exec-file:build/chunk-TIWNEKIS.js	AI (source-diff): Compiler/language-server bundle; network+exec pattern is inherent to LSP and code transformation, not malware.	ai	2026/06/08
source-diff	net-exec-file:build/chunk-LYYIQT6J.js	AI (source-diff): 3.1MB bundled compiler artifact; sample shows only standard bundler boilerplate, no actual network fetch or eval.	ai	2026/06/08
source-diff	net-exec-file:build/chunk-46EEXYHP.js	AI (source-diff): Bundled compiler output; sample shows only standard bundler helpers (decorators, async), no actual network fetch or eval payload.	ai	2026/06/08
source-diff	net-exec-file:build/chunk-NQCSWP3L.js	AI (source-diff): Large bundled compiler output; network+exec pattern is from bundled Babel/TS tooling, not dropper behavior.	ai	2026/06/08
source-diff	net-exec-file:build/chunk-7EMGC6AD.js	AI (source-diff): Large bundled build artifact for a compiler tool; network+exec pattern is from bundled Babel/TS runtime helpers, not dropper malware.	ai	2026/06/07
source-diff	net-exec-file:build/chunk-Y3SDLINT.js	AI (source-diff): Large bundled compiler output; net+exec pattern is inherent to a compiler/transpiler tool, not malware.	ai	2026/06/07
source-diff	net-exec-file:build/chunk-HOEHBJ7R.js	AI (source-diff): Large bundled build artifact for a compiler tool; network+exec pattern is from bundled Babel/TS runtime helpers, not dropper behavior.	ai	2026/06/07
source-diff	net-exec-file:build/chunk-S6SV63VD.js	AI (source-diff): Large bundled compiler artifact; network+exec pattern is from bundled language-server/compiler code, not malware.	ai	2026/06/06
source-diff	net-exec-file:build/chunk-6YPLDA76.js	AI (source-diff): Compiler/language-server bundle; network+code-exec pattern is inherent to this package's purpose, not malware.	ai	2026/06/06
source-diff	net-exec-file:build/chunk-7D775S4V.js	AI (source-diff): Large bundled compiler artifact; sample shows standard TS polyfill boilerplate, not dropper/loader code.	ai	2026/06/06
source-diff	net-exec-file:build/chunk-TSATPA2U.js	AI (source-diff): Large bundled build artifact for a compiler package; network+exec pattern is from bundled toolchain code, not malware.	ai	2026/06/06
source-diff	net-exec-file:build/chunk-DB2CJDOL.js	AI (source-diff): Build bundle for a compiler package; network+exec pattern is from bundled compiler/LSP code, not dropper malware.	ai	2026/06/06
source-diff	net-exec-file:build/chunk-K3EBH7V6.js	AI (source-diff): Large bundled compiler output; network+exec pattern is from bundled toolchain code, not dropper behavior.	ai	2026/06/05
source-diff	net-exec-file:build/chunk-FIIGCVSM.js	AI (source-diff): Large bundled compiler output; net+exec pattern is from bundled Babel/TS toolchain, not malware.	ai	2026/06/05
source-diff	net-exec-file:build/chunk-O2F523M5.js	AI (source-diff): Large bundled build artifact with standard esbuild boilerplate; network+exec pattern is expected for a compiler package.	ai	2026/06/05
source-diff	net-exec-file:build/chunk-3PVSYUJV.js	AI (source-diff): Large bundled compiler artifact; sample shows standard build helpers, not malicious network+exec pattern.	ai	2026/06/05
source-diff	net-exec-file:build/chunk-4YMBG4SM.js	AI (source-diff): Compiler bundle artifact; sample shows standard esbuild/rollup helpers, not malicious network+exec pattern.	ai	2026/06/05
source-diff	net-exec-file:build/chunk-3JS4YG6N.js	AI (source-diff): Compiler/language-server build bundle; network+exec pattern is expected for this tool's functionality, not malware.	ai	2026/06/05
source-diff	net-exec-file:build/chunk-VRGYQLZL.js	AI (source-diff): Compiler package; bundled build output with network/eval patterns is expected for a transpiler/compiler tool.	ai	2026/06/05
source-diff	net-exec-file:build/chunk-2Q4QKW7T.js	AI (source-diff): Large bundled compiler artifact; network+exec pattern is from bundled deps (Babel, TS, vscode-languageserver), not malware.	ai	2026/06/04
source-diff	net-exec-file:build/chunk-FCVCEIPF.js	AI (source-diff): 3MB esbuild bundle for a compiler package; sample shows standard decorator/async helpers, not malware.	ai	2026/06/03
source-diff	net-exec-file:build/chunk-MN7XRSIB.js	AI (source-diff): Large bundled compiler artifact; sample shows standard build helpers, not malware patterns.	ai	2026/06/03
source-diff	net-exec-file:build/chunk-7EXJHYWX.js	AI (source-diff): Bundled compiler artifact; sample shows standard build helpers, not dropper/loader malware.	ai	2026/06/03
source-diff	net-exec-file:build/chunk-ZV4RVSWH.js	AI (source-diff): Large bundled build artifact for a compiler tool; boilerplate JS helpers, not malware patterns.	ai	2026/06/02
publish-pattern	new-deps-added	AI (publish-pattern): Babel deps are well-known transpiler packages consistent with compiler functionality.	ai	2026/06/02
source-diff	net-exec-file:build/chunk-SJFIPH42.js	AI (source-diff): Large bundled build artifact from established Artel compiler; network+exec pattern is from legitimate compiler/LSP functionality, not malware.	ai	2026/06/02
source-diff	net-exec-file:build/chunk-ER3TEZSN.js	AI (source-diff): Bundled compiler output; esbuild/tsc artifact with standard async/decorator helpers, not dropper code.	ai	2026/06/02
source-diff	net-exec-file:build/chunk-CWGZOWF7.js	AI (source-diff): Bundled compiler artifact; network+exec pattern comes from vscode-languageserver and compiler internals, not malware.	ai	2026/06/02
source-diff	net-exec-file:build/chunk-MLUN6742.js	AI (source-diff): Compiler package; bundled chunk with network+exec patterns is expected for a language compiler/toolchain artifact.	ai	2026/06/02
source-diff	net-exec-file:build/chunk-CS2AK7Z7.js	AI (source-diff): Compiler package; large bundled build artifacts with network+exec patterns are expected and stable across versions.	ai	2026/06/01
source-diff	net-exec-file:build/chunk-PDVQZURU.js	AI (source-diff): Large bundled compiler artifact; network+exec pattern is from bundled LSP/compiler code, not dropper malware.	ai	2026/06/01
source-diff	net-exec-file:build/chunk-E72KEKQV.js	AI (source-diff): Large bundled compiler artifact; network/exec patterns are from bundled deps (vscode-languageserver, babel), not malicious dropper code.	ai	2026/05/31
source-diff	net-exec-file:build/chunk-3VRPBHJN.js	AI (source-diff): Large bundled build artifact from a compiler project; network+exec pattern reflects bundled compiler/LSP code, not malware.	ai	2026/05/31
source-diff	net-exec-file:build/chunk-YNG6354X.js	AI (source-diff): Standard esbuild/rollup bundle for Artel Compiler; bundler boilerplate, not dropper malware.	ai	2026/05/30
source-diff	net-exec-file:build/chunk-LX6LUKPR.js	AI (source-diff): Bundled esbuild output for a compiler package; network+exec pattern is from legitimate async/fetch patterns in the bundle, not dropper behavior.	ai	2026/05/30
source-diff	net-exec-file:build/chunk-EVYL6VFM.js	AI (source-diff): Large bundled compiler output (esbuild); network+exec pattern is from bundled deps, not malware.	ai	2026/05/29
source-diff	net-exec-file:build/chunk-LD2OIYWC.js	AI (source-diff): Bundled compiler artifact; sample shows standard build helpers, not dropper/loader patterns.	ai	2026/05/27
source-diff	obfuscated-file:build/types/tree/Nodes.d.ts	AI (source-diff): Large .d.ts with long union type lines is expected for a compiler's AST node declarations.	ai	2026/05/27
source-diff	net-exec-file:build/chunk-RQOGIK5O.js	AI (source-diff): Compiler/transpiler tool; bundled Babel+TS internals legitimately combine network (LSP) and code execution (transform) patterns.	ai	2026/05/15
source-diff	net-exec-file:build/chunk-KCEJTV3Q.js	AI (source-diff): Large bundled build artifact from a compiler package; sample shows standard bundle boilerplate, not malware.	ai	2026/05/15
source-diff	net-exec-file:build/chunk-Y77RKBXA.js	AI (source-diff): 4.6MB bundled compiler artifact; sample shows only standard bundler/decorator boilerplate, no actual network or eval patterns.	ai	2026/05/15
provenance	no-provenance	AI (provenance): Established package with consistent release history; lack of provenance is common and not a risk signal here.	ai	2026/04/28
phantom-deps	phantom-dep:vscode-json-languageservice	AI (phantom-deps): VSCode language service dep referenced via config, stable false positive.	ai	2026/04/28
phantom-deps	phantom-dep:jsonc-parser	AI (phantom-deps): Referenced in config files, stable false positive for this compiler package.	ai	2026/04/28
phantom-deps	phantom-dep:@vscode/l10n	AI (phantom-deps): VSCode tooling dep referenced via config, stable false positive for this package.	ai	2026/04/28
phantom-deps	phantom-dep:@babel/plugin-transform-class-properties	AI (phantom-deps): Babel plugin loaded by convention, not directly imported.	ai	2026/04/28
phantom-deps	phantom-dep:@babel/plugin-proposal-decorators	AI (phantom-deps): Babel plugin loaded by convention, not directly imported.	ai	2026/04/28
phantom-deps	phantom-dep:@babel/generator	AI (phantom-deps): Babel packages are framework-scoped build deps, not directly imported at runtime.	ai	2026/04/28
phantom-deps	phantom-dep:@babel/parser	AI (phantom-deps): Babel packages are framework-scoped build deps, not directly imported at runtime.	ai	2026/04/28
phantom-deps	phantom-dep:@babel/core	AI (phantom-deps): Babel packages are framework-scoped build deps, not directly imported at runtime.	ai	2026/04/28

Versions (showing 28 of 128)

Version	Deps	Published
0.6.25219	11 / 2	2025-04-09
0.6.25218	11 / 2	2025-04-08
0.6.25217	11 / 2	2025-03-23
0.6.25216	11 / 2	2025-03-18
0.6.25215	11 / 2	2025-03-17
0.6.25214	11 / 2	2025-03-15
0.6.25213	11 / 2	2025-03-13
0.6.25212	11 / 2	2025-03-13
0.6.25211	11 / 2	2025-03-09
0.6.25210	11 / 2	2025-03-05
0.6.25209	11 / 2	2025-03-05
0.6.25208	11 / 2	2025-03-04
0.6.25207	11 / 2	2025-02-21
0.6.25206	11 / 2	2025-02-20
0.6.25205	11 / 2	2025-02-20
0.6.25204	11 / 2	2025-02-19
0.6.25203	11 / 2	2025-02-19
0.6.25202	11 / 2	2025-02-19
0.6.25201	11 / 2	2025-02-19
0.6.25200	11 / 2	2025-02-19
0.6.25199	11 / 2	2025-02-18
0.6.25198	11 / 2	2025-02-17
0.6.25197	11 / 2	2025-02-16
0.6.25196	11 / 2	2025-02-15
0.6.25194	11 / 2	2025-02-14
0.6.25193	11 / 2	2025-02-14
0.6.25192	11 / 2	2025-02-14
0.6.25191	11 / 2	2025-02-13