@axinom/mosaic-portal
Host application for Axinom Mosaic micro-frontends (Piral instance)
6
Versions
PROPRIETARY
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
schwendneraxinom_kuzminruwanxaxinomnpm
Keywords
axinommosaicaxinom mosaic
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:app/index.d8f5d1.js | AI (source-diff): Webpack bundle artifact; this package always ships a built JS bundle as its main deliverable. | ai | |
| source-diff | net-exec-file:app/index.d8f5d1.js | AI (source-diff): Network+exec pattern in a Piral portal bundle is expected; micro-frontend host loads remote pilets at runtime. | ai | |
| source-diff | obfuscated-file:app/index.3e2824.js | AI (source-diff): Standard webpack bundle output; long lines are minified JS from known deps, not obfuscation. | ai | |
| source-diff | net-exec-file:app/index.3e2824.js | AI (source-diff): Webpack bundle for a Piral portal app; network+eval patterns are expected in bundled SPA code. | ai | |
| source-diff | obfuscated-file:app/index.6a069a.js | AI (source-diff): Standard webpack bundle with visible node_modules structure; minification is expected for this Piral portal package. | ai | |
| source-diff | net-exec-file:app/index.6a069a.js | AI (source-diff): Network+exec pattern fires on webpack bundle; no actual dropper behavior visible in sample. | ai | |
| source-diff | obfuscated-file:app/index.69e869.js | AI (source-diff): Standard webpack bundle output for a Piral frontend app; minification is expected and not malicious. | ai | |
| source-diff | net-exec-file:app/index.69e869.js | AI (source-diff): Network calls and dynamic requires are normal in a webpack-bundled frontend portal app; no dropper indicators in sample. | ai |
Versions (showing 6 of 6)
| Version | Deps | Published |
|---|---|---|
| 0.46.0 | 0 / 46 | |
| 0.45.2 | 0 / 46 | |
| 0.45.1 | 0 / 46 | |
| 0.45.0 | 0 / 46 | |
| 0.44.1 | 0 / 48 | |
| 0.42.0 | 0 / 48 |
v0.42.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.