← Home

@ckeditor/ckeditor5-operations-compressor

npm Homepage

CKEditor 5 operations compressor for real-time collaboration.

10
Versions
SEE LICENSE IN LICENSE.md
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

ckeditor

Keywords

CKEditorckeditor5ckeditor 5WYSIWYGWYSIWYWtextrich-textrichtextckeditoreditoreditinghtmloperational transformationotcollaborationcollaborativereal-timerealtimeframework

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:obfuscation-while-true AI (semgrep): javascript-obfuscator signature; intentional for this proprietary package. ai
semgrep semgrep:obfuscation-hex-functions AI (semgrep): javascript-obfuscator output; package declares obfuscated:true. Stable across versions. ai
source-diff obfuscated-file:src/compressor.js AI (source-diff): Intentional CKSource obfuscation, no malicious behavior. ai
source-diff obfuscated-file:src/lib/compiledmessages.js AI (source-diff): Intentional CKSource obfuscation, no malicious behavior. ai
phantom-deps phantom-dep:protobufjs AI (phantom-deps): Package ships pre-built dist output; protobufjs is bundled into dist rather than imported at runtime, making phantom-dep detection a stable false positive for this package. ai
dependencies unvetted-dep:protobufjs AI (dependencies): protobufjs is a legitimate, widely-used library; its use in a real-time collaboration operations compressor for serializing OT data is expected and appropriate. ai
phantom-deps phantom-dep:es-toolkit AI (phantom-deps): Package ships pre-built dist output (obfuscated:true); es-toolkit is bundled into dist rather than imported at runtime, making phantom-dep detection a stable false positive for this package. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-utils AI (dependencies): First-party CKEditor dependency from the same org; legitimate and expected for all @ckeditor/ckeditor5-* packages. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-utils AI (phantom-deps): Same-org first-party dependency; phantom detection is expected in CKEditor monorepo build configurations. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-engine AI (dependencies): First-party CKEditor dependency from the same org; legitimate and expected for all @ckeditor/ckeditor5-* packages. ai

Versions (showing 10 of 10)

Version Deps Published
48.3.1 3 / 0
48.3.0 3 / 0
48.2.0 4 / 0
48.1.1 4 / 0
48.1.0 4 / 0
48.0.1 4 / 0
48.0.0 4 / 0
47.7.3 4 / 0
47.7.1 4 / 0
47.7.0 4 / 0

v48.3.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.3.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.7.3

75 findings
HIGH New obfuscated file: src/operationcompressor/attributeoperationcompressor.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH New obfuscated file: src/lib/compiledmessages.js source-diff

[Reject — re-review on republish] (prior reject: AI (source-diff): All source files are obfuscated with javascript-obfuscator; package.json declares obfuscated:true. Cannot audit for malicious behavior.) Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH New obfuscated file: src/compressor.js source-diff

[Reject — re-review on republish] (prior reject: AI (source-diff): All source files are obfuscated with javascript-obfuscator; package.json declares obfuscated:true. Cannot audit for malicious behavior.) Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH New obfuscated file: src/actioncompressor/deletingactioncompressor.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH New obfuscated file: src/operationcompressor/insertoperationcompressor.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH New obfuscated file: src/lib/protobufdescriptions.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH New obfuscated file: src/actioncompressor/typingactioncompressor.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH New obfuscated file: src/actioncompressor/userselectionactioncompressor.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH obfuscation-hex-functions: src/actioncompressor/actioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x50f3(){const _0x2f2d89=['_splitCurrent','114528gBjYCp','_combineNext','1133238BWkiDB','_compressSingleOperat

HIGH obfuscation-hex-functions: src/actioncompressor/actioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x50f3(){const _0x2f2d89=['_splitCurrent','114528gBjYCp','_combineNext','1133238BWkiDB','_compressSingleOperat

HIGH obfuscation-while-true: src/actioncompressor/actioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x50f3(){const _0x2f2d89=['_splitCurrent','114528gBjYCp','_combineNext','1133238BWkiDB','_compressSingleOperat

HIGH obfuscation-while-true: src/actioncompressor/deletingactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x5d0bc3=_0x51fa;(function(_0x2dd5f6,_0x5224b2){const _0x55c77e=_0x51fa,_0x19ff11=_0x2dd5f6();while(!![]){try{con

HIGH obfuscation-hex-functions: src/actioncompressor/deletingactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5d0bc3=_0x51fa;(function(_0x2dd5f6,_0x5224b2){const _0x55c77e=_0x51fa,_0x19ff11=_0x2dd5f6();while(!![]){try{con

HIGH obfuscation-hex-functions: src/actioncompressor/deletingactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5d0bc3=_0x51fa;(function(_0x2dd5f6,_0x5224b2){const _0x55c77e=_0x51fa,_0x19ff11=_0x2dd5f6();while(!![]){try{con

HIGH obfuscation-hex-functions: src/actioncompressor/forwarddeletingactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2353(){const _0x4a8a83=['2091380utVItE','_splitCurrent','_checkOperation','_getCompressorByName','_context',

HIGH obfuscation-hex-functions: src/actioncompressor/forwarddeletingactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2353(){const _0x4a8a83=['2091380utVItE','_splitCurrent','_checkOperation','_getCompressorByName','_context',

HIGH obfuscation-while-true: src/actioncompressor/forwarddeletingactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x2353(){const _0x4a8a83=['2091380utVItE','_splitCurrent','_checkOperation','_getCompressorByName','_context',

HIGH obfuscation-while-true: src/actioncompressor/typingactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x4c57f7=_0x4536;(function(_0x2c05c,_0x11c00c){const _0x57828c=_0x4536,_0x148f17=_0x2c05c();while(!![]){try{const

HIGH obfuscation-hex-functions: src/actioncompressor/typingactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4c57f7=_0x4536;(function(_0x2c05c,_0x11c00c){const _0x57828c=_0x4536,_0x148f17=_0x2c05c();while(!![]){try{const

HIGH obfuscation-hex-functions: src/actioncompressor/typingactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4c57f7=_0x4536;(function(_0x2c05c,_0x11c00c){const _0x57828c=_0x4536,_0x148f17=_0x2c05c();while(!![]){try{const

HIGH obfuscation-while-true: src/actioncompressor/userselectionactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x530c32=_0xdf65;(function(_0x2ad026,_0x12ec7a){const _0xba7719=_0xdf65,_0x4958e5=_0x2ad026();while(!![]){try{con

HIGH obfuscation-hex-functions: src/actioncompressor/userselectionactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x530c32=_0xdf65;(function(_0x2ad026,_0x12ec7a){const _0xba7719=_0xdf65,_0x4958e5=_0x2ad026();while(!![]){try{con

HIGH obfuscation-hex-functions: src/actioncompressor/userselectionactioncompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x530c32=_0xdf65;(function(_0x2ad026,_0x12ec7a){const _0xba7719=_0xdf65,_0x4958e5=_0x2ad026();while(!![]){try{con

HIGH obfuscation-hex-functions: src/compressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x23e2(_0x2070ab,_0x1292f7){const _0x5eba4e=_0x5eba();return _0x23e2=function(_0x23e2a7,_0x4b0681){_0x23e2a7=_

HIGH obfuscation-while-true: src/compressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x23e2(_0x2070ab,_0x1292f7){const _0x5eba4e=_0x5eba();return _0x23e2=function(_0x23e2a7,_0x4b0681){_0x23e2a7=_

HIGH obfuscation-hex-functions: src/compressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x23e2(_0x2070ab,_0x1292f7){const _0x5eba4e=_0x5eba();return _0x23e2=function(_0x23e2a7,_0x4b0681){_0x23e2a7=_

HIGH obfuscation-hex-functions: src/errors.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2d00(_0x516edb,_0x100108){var _0x519b9d=_0x519b();return _0x2d00=function(_0x2d0094,_0x16c2b4){_0x2d0094=_0x

HIGH obfuscation-while-true: src/errors.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x2d00(_0x516edb,_0x100108){var _0x519b9d=_0x519b();return _0x2d00=function(_0x2d0094,_0x16c2b4){_0x2d0094=_0x

HIGH obfuscation-hex-functions: src/errors.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2d00(_0x516edb,_0x100108){var _0x519b9d=_0x519b();return _0x2d00=function(_0x2d0094,_0x16c2b4){_0x2d0094=_0x

HIGH obfuscation-while-true: src/index.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x4d3055,_0x420fb6){var _0x5a3d17=_0x1a81,_0x388081=_0x4d3055();while(!![]){try{var _0x16d06d=-parseInt(_0x5a

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x4d3055,_0x420fb6){var _0x5a3d17=_0x1a81,_0x388081=_0x4d3055();while(!![]){try{var _0x16d06d=-parseInt(_0x5a

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x4d3055,_0x420fb6){var _0x5a3d17=_0x1a81,_0x388081=_0x4d3055();while(!![]){try{var _0x16d06d=-parseInt(_0x5a

HIGH obfuscation-while-true: src/lib/compiledmessages.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/compiledmessages.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | (function(_0x5a46cf,_0x56bd02){var _0x4dba5c=_0xe65d,_0x19f362=_0x5a46cf();while(!![]){try{var _0x3c3ed8=parseInt(_0x4db > 24 | ((()=>{var _0x5911ba=_0xe65d,_0x302126=_0x4666ba[_0x5911ba(0x8b)],_0x279d55=_0x4666ba[_0x5911ba(0x129)],_0x1659a3=_0x466

HIGH obfuscation-hex-functions: src/lib/protobufdescriptions.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3a6b(){var _0x12f9e9=['2884887xpMNXv','bool','305372nlYyrk','string','Position','Element','repeated','655595

HIGH obfuscation-while-true: src/lib/protobufdescriptions.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x3a6b(){var _0x12f9e9=['2884887xpMNXv','bool','305372nlYyrk','string','Position','Element','repeated','655595

HIGH obfuscation-hex-functions: src/lib/protobufdescriptions.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3a6b(){var _0x12f9e9=['2884887xpMNXv','bool','305372nlYyrk','string','Position','Element','repeated','655595

HIGH obfuscation-while-true: src/operationcompressor/annotationmarkeroperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0xecb7ad=_0x4e33;(function(_0x430ae8,_0x1b919d){const _0x2b4eeb=_0x4e33,_0x463b42=_0x430ae8();while(!![]){try{con

HIGH obfuscation-hex-functions: src/operationcompressor/annotationmarkeroperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xecb7ad=_0x4e33;(function(_0x430ae8,_0x1b919d){const _0x2b4eeb=_0x4e33,_0x463b42=_0x430ae8();while(!![]){try{con

HIGH obfuscation-hex-functions: src/operationcompressor/annotationmarkeroperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xecb7ad=_0x4e33;(function(_0x430ae8,_0x1b919d){const _0x2b4eeb=_0x4e33,_0x463b42=_0x430ae8();while(!![]){try{con

HIGH obfuscation-while-true: src/operationcompressor/attributeoperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x24b208=_0x5406;(function(_0x129525,_0x319852){const _0x4158de=_0x5406,_0x49ee7d=_0x129525();while(!![]){try{con

HIGH obfuscation-hex-functions: src/operationcompressor/attributeoperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x24b208=_0x5406;(function(_0x129525,_0x319852){const _0x4158de=_0x5406,_0x49ee7d=_0x129525();while(!![]){try{con

HIGH obfuscation-hex-functions: src/operationcompressor/attributeoperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x24b208=_0x5406;(function(_0x129525,_0x319852){const _0x4158de=_0x5406,_0x49ee7d=_0x129525();while(!![]){try{con

HIGH obfuscation-while-true: src/operationcompressor/insertoperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x2a7923=_0x3b54;(function(_0x2ece58,_0x28f9d2){const _0x229670=_0x3b54,_0x2430ba=_0x2ece58();while(!![]){try{con

HIGH obfuscation-hex-functions: src/operationcompressor/insertoperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2a7923=_0x3b54;(function(_0x2ece58,_0x28f9d2){const _0x229670=_0x3b54,_0x2430ba=_0x2ece58();while(!![]){try{con

HIGH obfuscation-hex-functions: src/operationcompressor/insertoperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2a7923=_0x3b54;(function(_0x2ece58,_0x28f9d2){const _0x229670=_0x3b54,_0x2430ba=_0x2ece58();while(!![]){try{con

HIGH obfuscation-while-true: src/operationcompressor/markeroperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x5198ff=_0x347f;(function(_0x496f3b,_0x2c05e0){const _0x592576=_0x347f,_0x10b002=_0x496f3b();while(!![]){try{con

HIGH obfuscation-hex-functions: src/operationcompressor/markeroperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5198ff=_0x347f;(function(_0x496f3b,_0x2c05e0){const _0x592576=_0x347f,_0x10b002=_0x496f3b();while(!![]){try{con

HIGH obfuscation-hex-functions: src/operationcompressor/markeroperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5198ff=_0x347f;(function(_0x496f3b,_0x2c05e0){const _0x592576=_0x347f,_0x10b002=_0x496f3b();while(!![]){try{con

HIGH obfuscation-hex-functions: src/operationcompressor/nooperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4596(){var _0x14c328=['index','_operationName','2613996ZZHLSz','compress','4935qRKljU','_id','10644723vYXyyN

HIGH obfuscation-hex-functions: src/operationcompressor/nooperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4596(){var _0x14c328=['index','_operationName','2613996ZZHLSz','compress','4935qRKljU','_id','10644723vYXyyN

HIGH obfuscation-while-true: src/operationcompressor/nooperationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x4596(){var _0x14c328=['index','_operationName','2613996ZZHLSz','compress','4935qRKljU','_id','10644723vYXyyN

HIGH obfuscation-hex-functions: src/operationcompressor/operationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1ddb95=_0x2bb0;function _0x2bb0(_0x3f5d0a,_0x41416b){const _0x5f3e60=_0x5f3e();return _0x2bb0=function(_0x2bb0f

HIGH obfuscation-while-true: src/operationcompressor/operationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x1ddb95=_0x2bb0;function _0x2bb0(_0x3f5d0a,_0x41416b){const _0x5f3e60=_0x5f3e();return _0x2bb0=function(_0x2bb0f

HIGH obfuscation-hex-functions: src/operationcompressor/operationcompressor.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1ddb95=_0x2bb0;function _0x2bb0(_0x3f5d0a,_0x41416b){const _0x5f3e60=_0x5f3e();return _0x2bb0=function(_0x2bb0f

HIGH obfuscation-hex-functions: src/protobuffactory.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4720(){const _0x26647b=['10881926nhEYBh','decompress','toObject','encode','1256TaVjOE','getDescriptor','10Mz

HIGH obfuscation-while-true: src/protobuffactory.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x4720(){const _0x26647b=['10881926nhEYBh','decompress','toObject','encode','1256TaVjOE','getDescriptor','10Mz

HIGH obfuscation-hex-functions: src/protobuffactory.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4720(){const _0x26647b=['10881926nhEYBh','decompress','toObject','encode','1256TaVjOE','getDescriptor','10Mz

HIGH obfuscation-hex-functions: src/utils.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x42bb(_0x4768fb,_0xe415aa){const _0x239fe1=_0x239f();return _0x42bb=function(_0x42bbef,_0x5bb981){_0x42bbef=_

HIGH obfuscation-while-true: src/utils.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). This is a stable characteristic of this package and generalizes across versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x42bb(_0x4768fb,_0xe415aa){const _0x239fe1=_0x239f();return _0x42bb=function(_0x42bbef,_0x5bb981){_0x42bbef=_

HIGH obfuscation-hex-functions: src/utils.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated JS (package.json has 'obfuscated: true'). Hex-prefixed names are a stable characteristic of this package and generalize across versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x42bb(_0x4768fb,_0xe415aa){const _0x239fe1=_0x239f();return _0x42bb=function(_0x42bbef,_0x5bb981){_0x42bbef=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.