← Home

@auth0/universal-components-core

npm Repository Homepage

Core utilities for Auth0 Universal Components

9
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

auth0-ossauth0npmauth0brokkrjesseleoktajeffoktajeffbsmith-auth0sanjay.manikandhannirjoniltorresatkojaskirat_atkohenry.mcardlenicolas.villaloboschoahjosecarlos-chavez_atkoskatkotj.oktasgarcia-atkoroger.chanmaaantonelewisbyrne-oktatarunpreet.kaur

Keywords

i18nauth0coreutilities

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/en-US-EGQV3X7Z.mjs AI (source-diff): Minified i18n locale strings, not obfuscation. ai
source-diff obfuscated-file:dist/ja-GEHSVNLY.mjs AI (source-diff): Minified i18n locale strings, not obfuscation. ai
source-diff obfuscated-file:dist/fr-JHDVFYS5.mjs AI (source-diff): Minified i18n locale strings, not obfuscation. ai
source-diff obfuscated-file:dist/ja-6MRFUOX4.mjs AI (source-diff): Minified locale/i18n string bundle from tsup, not obfuscation. ai
source-diff obfuscated-file:dist/en-US-XGJGP7OY.mjs AI (source-diff): Minified locale/i18n string bundle from tsup, not obfuscation. ai
source-diff obfuscated-file:dist/fr-EB6BTGYA.mjs AI (source-diff): Minified locale/i18n string bundle from tsup, not obfuscation. ai
maintainer-change maintainer-added AI (maintainer-change): Org-internal maintainer roster change; provenance/CI publish unchanged, no behavioral impact. ai
source-diff obfuscated-file:dist/en-US-L7I4JGQS.mjs AI (source-diff): Minified i18n locale strings, not obfuscated code. ai
source-diff obfuscated-file:dist/ja-B5AQGJRY.mjs AI (source-diff): Minified i18n locale strings, not obfuscated code. ai
source-diff obfuscated-file:dist/fr-VWN3CQEE.mjs AI (source-diff): Minified i18n locale strings, not obfuscated code. ai
dependencies unvetted-dep:@auth0/myorganization-js AI (dependencies): Auth0-owned dependency used within Auth0's own component library; namespace match reduces risk. ai
dependencies unvetted-dep:@auth0/myaccount-js AI (dependencies): Auth0-owned dependency used within Auth0's own component library; namespace match reduces risk. ai

Versions (showing 9 of 9)

Version Deps Published
3.0.2 3 / 3
3.0.1 3 / 3
3.0.0 3 / 3
2.1.1 3 / 3
2.1.0 3 / 3
2.0.1 3 / 3
2.0.0 3 / 3
1.1.0 3 / 3
1.0.0 3 / 3

v3.0.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.0.0

4 findings
HIGH New obfuscated file: dist/en-US-L7I4JGQS.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/fr-VWN3CQEE.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ja-B5AQGJRY.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.