@c8y/ngx-components
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-messaging-management.mjs | AI (source-diff): Bundled build output, readable source. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-remote-access-vnc-vnc-viewer.mjs | AI (source-diff): Bundled build output consistent with rest of package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-remote-access-vnc-remote-access-vnc-endpoint-modal.mjs | AI (source-diff): Bundled build output consistent with rest of package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-remote-access-ssh-remote-access-ssh-endpoint-modal.mjs | AI (source-diff): Bundled build output consistent with rest of package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-remote-access-shared.mjs | AI (source-diff): Bundled build output consistent with rest of package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-scada.mjs | AI (source-diff): Angular fesm2022 bundle output, not obfuscation; readable source in sampled sibling files. | ai | |
| source-diff | obfuscated-file:widgets/implementations/scada/index.d.ts | AI (source-diff): Generated TypeScript declaration bundle, long lines are normal for d.ts rollups. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-B5jQE945.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-GG2zPxo7.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-Cbimsi_L.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-Cp2nq21L.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-CiiQzFm8.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-DatFnIwp.mjs | AI (source-diff): Angular fesm2022 bundle output; readable TS class code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-LrmlAh6V.mjs | AI (source-diff): Standard Angular fesm2022 bundled output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-f1u1TcCl.mjs | AI (source-diff): Standard Angular fesm2022 bundled output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-2HrOH9-8.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-DxpivVU5.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-yfc45-l_.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-DgWGXzEx.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-Dz3efcEU.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-Zygcid6r.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): ajv, ajv-formats, echarts, ngx-echarts are well-established packages consistent with new dashboard/chart features. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-L0Ns8oOr.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large Angular library with many sub-entry-points; 177 new files consistent with major feature additions (echart, global-context, asset-properties). | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-version-history.component-Cqy2OUcS.mjs | AI (source-diff): Standard Angular fesm2022 bundled output; samples show clean component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-ai-ai-chat.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-global-context.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-exports-list.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-events.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-events-events-timeline.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-echart.mjs | AI (source-diff): Angular FESM2022 bundle for new echart module; standard build output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-device-provisioned-certificates.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-device-enrolment-modal.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-datapoint-explorer-view.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-manager.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-asset-properties.mjs | AI (source-diff): Angular FESM2022 bundle; standard build output for this package. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-ai-agent-chat.mjs | AI (source-diff): Angular FESM2022 bundle with long lines from inlined templates; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-BYcQOE5h.mjs | AI (source-diff): Standard Angular fesm2022 build output; long lines from bundled templates, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-DX9Rgjgl.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-events.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-w8N16Z3t.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-C7yXSDYC.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-3yTe6lIr.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-DYac6foX.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-2rDsrxcs.mjs | AI (source-diff): Standard Angular FESM2022 bundle output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-DoXvIpvX.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-CIOgylW-.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-JMTpQkY3.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-B2arQ9BP.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-LtP3NmEZ.mjs | AI (source-diff): Angular fesm2022 bundle; standard minified Angular output. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-LHAUigva.mjs | AI (source-diff): Angular fesm2022 bundle; long lines are standard minified Angular output, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-B2em01_W.mjs | AI (source-diff): Standard Angular FESM2022 compiled output; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-CTK9zNUh.mjs | AI (source-diff): Standard Angular FESM2022 compiled output; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-CkmurxJv.mjs | AI (source-diff): Standard Angular FESM2022 compiled output; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-CPLDClTp.mjs | AI (source-diff): Standard Angular FESM2022 compiled output; not obfuscated. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-application-access-list.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-pie-chart.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-datapoints-list.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-widgets-implementations-asset-table.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-operation-picker.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-feature-toggles-list.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-C1cuxN3L.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-BxfCjbYY.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-application-access-user-application-access-user-details-wrapper.mjs | AI (source-diff): Angular FESM2022 compiled output; long lines are compiler artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-C8QX6xlf.mjs | AI (source-diff): Standard Angular fesm2022 minified bundle; long lines are normal for this build output format. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-configuration-snapshot-config.component-BrYcCHYL.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-dashboard-details-advanced-tab-dashboard-details-advanced-tab.component-DFytXNdc.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-version-history.component-1xx4pGiq.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-general-settings.component-4aO0U4qs.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-context-dashboard-dashboard-appearance-settings.component-BkwPfkeK.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-last-measurement-config.component-BGhex-OP.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-fieldbus-item-status-config.component-uEdtPWC0.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| source-diff | obfuscated-file:fesm2022/c8y-ngx-components-computed-asset-properties-alarm-count-config.component-tP8yUdy3.mjs | AI (source-diff): Standard Angular FESM2022 bundle output; long lines are template metadata, not obfuscation. | ai | |
| phantom-deps | phantom-dep:marked | AI (phantom-deps): Large multi-entry-point library; marked is used in compiled output even if not directly imported in analyzed entry. | ai | |
| phantom-deps | phantom-dep:libphonenumber-js | AI (phantom-deps): Same as marked — used in compiled sub-entries; stable false positive for this package. | ai | |
| semgrep | semgrep:toplevel-fetch | AI (semgrep): Fires on a class method named fetch() in Angular service, not a top-level network call; stable false positive for this package. | ai |
Versions (showing 100 of 217)
v1023.14.180
8 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1023.14.178
8 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1023.14.177
8 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1023.14.131
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.130
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.128
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.127
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.122
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.118
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.114
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.113
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.112
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.111
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.104
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.103
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.102
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.100
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.98
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.97
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.96
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.94
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.92
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.76
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.70
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.68
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.60
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.57
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.51
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.47
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.44
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.41
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.38
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.37
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.36
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.33
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.14.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.12.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.10.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.9.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.7.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.7.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.6.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.5.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.4.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.4.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.4.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.0.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1023.0.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1022.46.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1022.45.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.165
31 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1021.22.157
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.156
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.155
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.154
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.153
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.151
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.150
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.149
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.146
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1021.22.145
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.