← Home

@ckeditor/ckeditor5-list-multi-level

Multi-level list feature for CKEditor 5.

9
Versions
SEE LICENSE IN LICENSE.md
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

ckeditor

Keywords

ckeditorckeditor5ckeditor 5ckeditor5-featureckeditor5-pluginWYSIWYGtextrich-textrichtextckeditoreditoreditinghtmlcontentEditablemulti-level listlegal-style numbering

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:src/multilevellistcommand.js AI (source-diff): CKSource proprietary premium plugin is intentionally obfuscated; stable across versions. ai
source-diff obfuscated-file:build/list-multi-level.js AI (source-diff): Minified build output for official CKEditor feature. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-core AI (phantom-deps): Same-org peer dep referenced indirectly; benign. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-list AI (phantom-deps): Same-org peer dep; benign. ai
semgrep semgrep:obfuscation-hex-functions AI (semgrep): Intentional javascript-obfuscator output on proprietary paid plugin; no malicious behavior. ai
semgrep semgrep:obfuscation-while-true AI (semgrep): Same obfuscator signature; expected for this commercial package. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-ui AI (phantom-deps): Same-org monorepo package; phantom dep pattern is expected in CKEditor5 build artifacts. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-icons AI (phantom-deps): Same-org monorepo package; phantom dep pattern is expected in CKEditor5 build artifacts. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-ui AI (dependencies): First-party @ckeditor monorepo dependency pinned to same release version; not a third-party risk. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-clipboard AI (phantom-deps): Same-org monorepo package; phantom dep pattern is expected in CKEditor5 build artifacts. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-engine AI (phantom-deps): Same-org monorepo package; phantom dep pattern is expected in CKEditor5 build artifacts. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-core AI (dependencies): First-party @ckeditor monorepo dependency pinned to same release version; not a third-party risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-list AI (dependencies): First-party @ckeditor monorepo dependency pinned to same release version; not a third-party risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-utils AI (dependencies): First-party @ckeditor monorepo dependency pinned to same release version; not a third-party risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-engine AI (dependencies): First-party @ckeditor monorepo dependency pinned to same release version; not a third-party risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-clipboard AI (dependencies): First-party @ckeditor monorepo dependency pinned to same release version; not a third-party risk. ai

Versions (showing 9 of 9)

Version Deps Published
48.3.1 7 / 0
48.3.0 7 / 0
48.2.0 7 / 0
48.1.1 7 / 0
48.1.0 7 / 0
48.0.1 7 / 0
48.0.0 7 / 0
47.7.3 7 / 0
47.6.2 7 / 0

v48.3.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.3.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.7.3

56 findings
HIGH New obfuscated file: build/list-multi-level.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/multilevellistcommand.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4e35(){var _0x5632a0=['320VzlJss','16zZGdSZ','13244988TeLVjz','54710sTFQlR','74162zKaYJu','232ogsLNV','12GLV

HIGH obfuscation-while-true: src/index.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): while(!![]) loops confirm javascript-obfuscator output in the main entry point; this is a persistent characteristic of this package version.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x4e35(){var _0x5632a0=['320VzlJss','16zZGdSZ','13244988TeLVjz','54710sTFQlR','74162zKaYJu','232ogsLNV','12GLV

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4e35(){var _0x5632a0=['320VzlJss','16zZGdSZ','13244988TeLVjz','54710sTFQlR','74162zKaYJu','232ogsLNV','12GLV

HIGH obfuscation-while-true: src/legacyerrors.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): while(!![]) loops confirm javascript-obfuscator output in the main entry point; this is a persistent characteristic of this package version.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x4a029b,_0x4c0cca){var _0x47adf4=_0x2bc6,_0x35a86d=_0x4a029b();while(!![]){try{var _0x4e880b=-parseInt(_0x47

HIGH obfuscation-hex-functions: src/legacyerrors.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x4a029b,_0x4c0cca){var _0x47adf4=_0x2bc6,_0x35a86d=_0x4a029b();while(!![]){try{var _0x4e880b=-parseInt(_0x47

HIGH obfuscation-hex-functions: src/legacyerrors.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x4a029b,_0x4c0cca){var _0x47adf4=_0x2bc6,_0x35a86d=_0x4a029b();while(!![]){try{var _0x4e880b=-parseInt(_0x47

HIGH obfuscation-while-true: src/multilevellist.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): while(!![]) loops confirm javascript-obfuscator output in the main entry point; this is a persistent characteristic of this package version.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0x14f13f=_0x5400;(function(_0x1265bf,_0x8f949){var _0x14c1de=_0x5400,_0x235238=_0x1265bf();while(!![]){try{var _0x4

HIGH obfuscation-hex-functions: src/multilevellist.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x14f13f=_0x5400;(function(_0x1265bf,_0x8f949){var _0x14c1de=_0x5400,_0x235238=_0x1265bf();while(!![]){try{var _0x4

HIGH obfuscation-hex-functions: src/multilevellist.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x14f13f=_0x5400;(function(_0x1265bf,_0x8f949){var _0x14c1de=_0x5400,_0x235238=_0x1265bf();while(!![]){try{var _0x4

HIGH obfuscation-hex-functions: src/multilevellistcommand.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4aacf4=_0x530d;function _0x530d(_0x3227fe,_0x4a87c0){const _0x4159b7=_0x4159();return _0x530d=function(_0x530d4

HIGH obfuscation-while-true: src/multilevellistcommand.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): while(!![]) loops confirm javascript-obfuscator output in the main entry point; this is a persistent characteristic of this package version.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x4aacf4=_0x530d;function _0x530d(_0x3227fe,_0x4a87c0){const _0x4159b7=_0x4159();return _0x530d=function(_0x530d4

HIGH obfuscation-hex-functions: src/multilevellistcommand.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4aacf4=_0x530d;function _0x530d(_0x3227fe,_0x4a87c0){const _0x4159b7=_0x4159();return _0x530d=function(_0x530d4

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-while-true: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): while(!![]) loops confirm javascript-obfuscator output in the main entry point; this is a persistent characteristic of this package version.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-hex-functions: src/multilevellistediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x8e704e=_0x355e;function _0x355e(_0x2742b1,_0x13169f){const _0xee3325=_0xee33();return _0x355e=function(_0x355e3

HIGH obfuscation-while-true: src/multilevellistui.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): while(!![]) loops confirm javascript-obfuscator output in the main entry point; this is a persistent characteristic of this package version.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x2d145e=_0x23ab;(function(_0x46d29c,_0xe53ecf){const _0x4cc528=_0x23ab,_0x49fb8c=_0x46d29c();while(!![]){try{con

HIGH obfuscation-hex-functions: src/multilevellistui.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2d145e=_0x23ab;(function(_0x46d29c,_0xe53ecf){const _0x4cc528=_0x23ab,_0x49fb8c=_0x46d29c();while(!![]){try{con

HIGH obfuscation-hex-functions: src/multilevellistui.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2d145e=_0x23ab;(function(_0x46d29c,_0xe53ecf){const _0x4cc528=_0x23ab,_0x49fb8c=_0x46d29c();while(!![]){try{con

HIGH obfuscation-hex-functions: src/ui/multilevellistview.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5ab0(_0x4bb420,_0x2dad90){const _0x2e1b46=_0x2e1b();return _0x5ab0=function(_0x5ab0ee,_0x1af3ba){_0x5ab0ee=_

HIGH obfuscation-while-true: src/ui/multilevellistview.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): while(!![]) loops confirm javascript-obfuscator output in the main entry point; this is a persistent characteristic of this package version.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x5ab0(_0x4bb420,_0x2dad90){const _0x2e1b46=_0x2e1b();return _0x5ab0=function(_0x5ab0ee,_0x1af3ba){_0x5ab0ee=_

HIGH obfuscation-hex-functions: src/ui/multilevellistview.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source code (hex-prefixed function names) in the main entry point is a persistent characteristic of this package version and prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5ab0(_0x4bb420,_0x2dad90){const _0x2e1b46=_0x2e1b();return _0x5ab0=function(_0x5ab0ee,_0x1af3ba){_0x5ab0ee=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.