@chialab/estransform
Execute multiple transformations on JavaScript sources with full sourcemaps support.
3
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
chialab-adminchialab-developers
Keywords
estransformpipetransformsourcemaps
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:base64-decode | AI (semgrep): Decodes inline base64 sourcemap data URIs — standard sourcemap handling, not a payload concern. | ai | |
| dependencies | unvetted-dep:@napi-rs/magic-string | AI (dependencies): @napi-rs/magic-string is a legitimate NAPI-based string manipulation library appropriate for a JS transform tool. | ai |