@c8y/ngx-components
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-messaging-management.mjs | AI (source-diff): Bundled build output, readable source. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-remote-access-vnc-vnc-viewer.mjs | AI (source-diff): Bundled build output consistent with rest of package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-remote-access-vnc-remote-access-vnc-endpoint-modal.mjs | AI (source-diff): Bundled build output consistent with rest of package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-remote-access-ssh-remote-access-ssh-endpoint-modal.mjs | AI (source-diff): Bundled build output consistent with rest of package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-remote-access-shared.mjs | AI (source-diff): Bundled build output consistent with rest of package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-scada.mjs | AI (source-diff): Angular fesm2022 bundle output, not obfuscation; readable source in sampled sibling files. | ai | |
| source-diff | obfuscated-file:widgets/implementations/scada/index.d.ts | AI (source-diff): Generated TypeScript declaration bundle, long lines are normal for d.ts rollups. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-B5jQE945.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-GG2zPxo7.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-Cbimsi_L.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-Cp2nq21L.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-CiiQzFm8.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-DatFnIwp.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-LrmlAh6V.mjs | AI (source-diff): Standard Angular fesm2022 bundled output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-f1u1TcCl.mjs | AI (source-diff): Standard Angular fesm2022 bundled output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-2HrOH9-8.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-DxpivVU5.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-yfc45-l_.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-DgWGXzEx.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-Dz3efcEU.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-Zygcid6r.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): ajv, ajv-formats, echarts, ngx-echarts are well-established packages consistent with new dashboard/chart features. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-L0Ns8oOr.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large Angular library with many sub-entry-points; 177 new files consistent with major feature additions (echart, global-context, asset-properties). | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-version-history.component-Cqy2OUcS.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-ai-ai-chat.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-global-context.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-exports-list.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-events.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-events-events-timeline.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-echart.mjs | AI (source-diff): Angular FESM2022 bundle for new echart module; standard build output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-device-provisioned-certificates.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-device-enrolment-modal.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-datapoint-explorer-view.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-manager.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-asset-properties.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-ai-agent-chat.mjs | AI (source-diff): Angular FESM2022 bundle with long lines from inlined templates; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-BYcQOE5h.mjs | AI (source-diff): Standard Angular fesm2022 build output; long lines from bundled templates, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-DX9Rgjgl.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-events.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-w8N16Z3t.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-C7yXSDYC.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-3yTe6lIr.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-DYac6foX.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-2rDsrxcs.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-DoXvIpvX.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-CIOgylW-.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-JMTpQkY3.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-B2arQ9BP.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-LtP3NmEZ.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-LHAUigva.mjs | AI (source-diff): Angular fesm2022 bundle; long lines are standard minified Angular output, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-B2em01_W.mjs | AI (source-diff): Standard Angular FESM2022 compiled output; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-CTK9zNUh.mjs | AI (source-diff): Standard Angular FESM2022 compiled output; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-CkmurxJv.mjs | AI (source-diff): Standard Angular FESM2022 compiled output; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-CPLDClTp.mjs | AI (source-diff): Standard Angular FESM2022 compiled output; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-application-access-list.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-pie-chart.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-datapoints-list.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-asset-table.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-operation-picker.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-feature-toggles-list.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-C1cuxN3L.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-BxfCjbYY.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-application-access-user-application-access-user-details-wrapper.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-C8QX6xlf.mjs | AI (source-diff): Standard Angular fesm2022 minified bundle; long lines are normal for this build output format. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-BrYcCHYL.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-DFytXNdc.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-version-history.component-1xx4pGiq.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-4aO0U4qs.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-BkwPfkeK.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-BGhex-OP.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-uEdtPWC0.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-tP8yUdy3.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| phantom-deps | phantom-dep:marked | AI (phantom-deps): Large multi-entry-point library; marked is used in compiled output even if not directly imported in analyzed entry. | ai | |
| phantom-deps | phantom-dep:libphonenumber-js | AI (phantom-deps): Same as marked — used in compiled sub-entries; stable false positive for this package. | ai | |
| semgrep | semgrep:toplevel-fetch | AI (semgrep): Fires on a class method named fetch() in Angular service, not a top-level network call; stable false positive for this package. | ai |
Versions (showing 51 of 217)
| Version | Deps | Published |
|---|---|---|
| 1023.97.8 | 17 / 0 | |
| 1023.97.7 | 17 / 0 | |
| 1023.97.4 | 17 / 0 | |
| 1023.97.3 | 17 / 0 | |
| 1023.96.0 | 17 / 0 | |
| 1023.92.0 | 17 / 0 | |
| 1023.90.1 | 17 / 0 | |
| 1023.88.4 | 17 / 0 | |
| 1023.88.2 | 17 / 0 | |
| 1023.88.1 | 17 / 0 | |
| 1023.85.1 | 17 / 0 | |
| 1023.83.4 | 17 / 0 | |
| 1023.83.3 | 17 / 0 | |
| 1023.83.2 | 17 / 0 | |
| 1023.82.8 | 17 / 0 | |
| 1023.82.4 | 17 / 0 | |
| 1023.82.3 | 17 / 0 | |
| 1023.82.2 | 17 / 0 | |
| 1023.82.1 | 17 / 0 | |
| 1023.82.0 | 17 / 0 | |
| 1023.81.3 | 17 / 0 | |
| 1023.81.2 | 17 / 0 | |
| 1023.80.2 | 17 / 0 | |
| 1023.80.0 | 17 / 0 | |
| 1023.79.1 | 17 / 0 | |
| 1023.78.7 | 17 / 0 | |
| 1023.78.5 | 17 / 0 | |
| 1023.78.4 | 17 / 0 | |
| 1023.78.1 | 17 / 0 | |
| 1023.77.1 | 17 / 0 | |
| 1023.76.0 | 17 / 0 | |
| 1023.75.1 | 17 / 0 | |
| 1023.71.1 | 17 / 0 | |
| 1023.70.0 | 17 / 0 | |
| 1023.68.7 | 17 / 0 | |
| 1023.68.6 | 17 / 0 | |
| 1023.68.3 | 17 / 0 | |
| 1023.68.0 | 17 / 0 | |
| 1023.67.0 | 17 / 0 | |
| 1023.66.4 | 17 / 0 | |
| 1023.66.3 | 17 / 0 | |
| 1023.65.2 | 17 / 0 | |
| 1023.65.1 | 17 / 0 | |
| 1023.65.0 | 17 / 0 | |
| 1023.64.2 | 17 / 0 | |
| 1023.64.1 | 17 / 0 | |
| 1023.63.1 | 17 / 0 | |
| 1023.63.0 | 17 / 0 | |
| 1023.62.2 | 17 / 0 | |
| 1023.61.12 | 17 / 0 | |
| 1023.61.2 | 17 / 0 |
v1023.97.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1023.97.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1023.97.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1023.97.3
9 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1023.96.0
11 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1023.63.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.63.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.62.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.61.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.61.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.