@bufbuild/cel-spec — Greenflagged

CEL definitions and test data

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

bufdevtstamm-bufbufbotjdailey_bufdoriakeung

Keywords

javascripttypescriptprotobufcelcommon-expression-language

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	obfuscated-file:dist/cjs/testdata/checking.js	AI (source-diff): Large generated test-data object with long lines; not obfuscated code.	ai	2026/05/30
provenance	publisher-changed	AI (provenance): Transition from individual to GitHub Actions CI/CD publishing with SLSA provenance.	ai	2026/05/30
source-diff	obfuscated-file:dist/esm/testdata/checking.js	AI (source-diff): Large generated test-data object with long lines; not obfuscated code.	ai	2026/05/30
source-diff	encoded-string-file:dist/esm/gen/cel/expr/conformance/conformance_service_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/cel/expr/conformance/conformance_service_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/cel/expr/explain_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/esm/gen/cel/expr/explain_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/google/rpc/status_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/esm/gen/google/rpc/status_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/cel/expr/syntax_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/esm/gen/cel/expr/syntax_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/cel/expr/conformance/proto2/test_all_types_extensions_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/esm/gen/cel/expr/conformance/proto2/test_all_types_extensions_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard bufbuild codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/esm/gen/cel/expr/checked_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard buf codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/cel/expr/conformance/test/simple_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard buf codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/esm/gen/cel/expr/conformance/test/simple_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard buf codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/cel/expr/conformance/proto2/test_all_types_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard buf codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/cel/expr/conformance/proto3/test_all_types_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard buf codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/esm/gen/cel/expr/conformance/proto2/test_all_types_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard buf codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/esm/gen/cel/expr/conformance/proto3/test_all_types_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard buf codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/esm/gen/cel/expr/eval_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard buf codegen pattern.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/cel/expr/checked_pb.js	AI (source-diff): Base64 protobuf file descriptor passed to fileDesc(); standard buf codegen pattern for this package.	ai	2026/05/10
source-diff	encoded-string-file:dist/cjs/gen/cel/expr/eval_pb.js	AI (source-diff): Base64 protobuf file descriptor; standard buf codegen pattern.	ai	2026/05/10

Versions (showing 7 of 7)

Version	Deps	Published
0.6.0	0 / 2	2026-06-01
0.5.0	0 / 2	2026-05-06
0.4.0	0 / 2	2026-01-20
0.3.0	0 / 2	2025-07-28
0.2.0	0 / 2	2025-06-04
0.1.0	0 / 2	2025-05-02
0.0.1	0 / 2	2025-04-30

v0.6.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.0

4 findings

HIGH Publisher changed: srikrsna-buf → GitHub Actions (on 2026-05-06) provenance

This version was published by a different npm account than previous versions on 2026-05-06. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: dist/cjs/testdata/checking.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/esm/testdata/checking.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.0

24 findings

HIGH Publisher changed: tstamm-buf → srikrsna-buf (on 2025-07-28) provenance

This version was published by a different npm account than previous versions on 2025-07-28. This could indicate a legitimate maintainer transition or an account compromise.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/checked_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/checked_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/conformance/conformance_service_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/conformance/conformance_service_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/eval_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/eval_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/explain_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/explain_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/conformance/test/simple_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/conformance/test/simple_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/google/rpc/status_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/google/rpc/status_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/syntax_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/syntax_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/conformance/proto2/test_all_types_extensions_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/conformance/proto2/test_all_types_extensions_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/conformance/proto2/test_all_types_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/conformance/proto3/test_all_types_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/conformance/proto2/test_all_types_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/conformance/proto3/test_all_types_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/cjs/gen/cel/expr/value_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/esm/gen/cel/expr/value_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.0

12 findings

HIGH Publisher changed: tstamm-buf → srikrsna-buf (on 2025-06-04) provenance

This version was published by a different npm account than previous versions on 2025-06-04. This could indicate a legitimate maintainer transition or an account compromise.