@ckeditor/ckeditor5-source-editing-enhanced
Source editing enhanced feature for CKEditor 5.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:src/utils/createcodemirroreditor.js | AI (source-diff): Intentional proprietary obfuscation by CKSource; no malicious behavior. | ai | |
| source-diff | obfuscated-file:src/ui/editsourcecommand.js | AI (source-diff): Intentional proprietary obfuscation by CKSource; no malicious behavior. | ai | |
| semgrep | semgrep:obfuscation-while-true | AI (semgrep): javascript-obfuscator signature; package declares obfuscated:true, generalizes across versions. | ai | |
| semgrep | semgrep:obfuscation-hex-functions | AI (semgrep): javascript-obfuscator hex naming; intentional, stable for this package. | ai | |
| phantom-deps | phantom-dep:@codemirror/lang-markdown | AI (phantom-deps): CodeMirror packages are declared deps used in config/type files for the CodeMirror integration; not directly imported but legitimately referenced. | ai | |
| phantom-deps | phantom-dep:@codemirror/theme-one-dark | AI (phantom-deps): CodeMirror packages are declared deps used in config/type files for the CodeMirror integration; not directly imported but legitimately referenced. | ai | |
| phantom-deps | phantom-dep:@codemirror/commands | AI (phantom-deps): CodeMirror packages are declared deps used in config/type files for the CodeMirror integration; not directly imported but legitimately referenced. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-engine | AI (phantom-deps): Same-org CKEditor package; phantom dep flag is a false positive for monorepo-style packages that reference sibling packages in config/type files. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-icons | AI (phantom-deps): Same-org CKEditor package; phantom dep flag is a false positive for monorepo-style packages that reference sibling packages in config/type files. | ai | |
| phantom-deps | phantom-dep:@codemirror/language | AI (phantom-deps): CodeMirror packages are declared deps used in config/type files for the CodeMirror integration; not directly imported but legitimately referenced. | ai | |
| phantom-deps | phantom-dep:@codemirror/lang-html | AI (phantom-deps): CodeMirror packages are declared deps used in config/type files for the CodeMirror integration; not directly imported but legitimately referenced. | ai | |
| phantom-deps | phantom-dep:@codemirror/autocomplete | AI (phantom-deps): CodeMirror packages are declared deps used in config/type files for the CodeMirror integration; not directly imported but legitimately referenced. | ai |
Versions (showing 9 of 9)
| Version | Deps | Published |
|---|---|---|
| 48.3.1 | 13 / 0 | |
| 48.3.0 | 13 / 0 | |
| 48.2.0 | 13 / 0 | |
| 48.1.1 | 13 / 0 | |
| 48.1.0 | 13 / 0 | |
| 48.0.1 | 13 / 0 | |
| 48.0.0 | 13 / 0 | |
| 47.7.3 | 14 / 0 | |
| 47.7.0 | 14 / 0 |
v48.3.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v48.3.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v47.7.3
62 findings[Reject — re-review on republish] (prior reject: AI (source-diff): Source files (not just build artifacts) are intentionally obfuscated with javascript-obfuscator; package.json confirms this with obfuscated:true. Cannot audit for malicious behavior.) Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.
[Reject — re-review on republish] (prior reject: AI (source-diff): Source files intentionally obfuscated; same pattern as createcodemirroreditor.js. Unauditable code in src/ is a disqualifier.) Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); this finding generalizes to all versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0xd01ff5,_0xda8e12){var _0x3528c8=_0x2889,_0x5e0831=_0xd01ff5();while(!![]){try{var _0x4244bf=-parseInt(_0x35
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0xd01ff5,_0xda8e12){var _0x3528c8=_0x2889,_0x5e0831=_0xd01ff5();while(!![]){try{var _0x4244bf=-parseInt(_0x35
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0xd01ff5,_0xda8e12){var _0x3528c8=_0x2889,_0x5e0831=_0xd01ff5();while(!![]){try{var _0x4244bf=-parseInt(_0x35
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); this finding generalizes to all versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x464f12=_0x571f;(function(_0x571689,_0x34903f){const _0x1fdcd2=_0x571f,_0x1f5c06=_0x571689();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x464f12=_0x571f;(function(_0x571689,_0x34903f){const _0x1fdcd2=_0x571f,_0x1f5c06=_0x571689();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x464f12=_0x571f;(function(_0x571689,_0x34903f){const _0x1fdcd2=_0x571f,_0x1f5c06=_0x571689();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x31f8(_0x30a25a,_0x32862e){const _0x16e3ed=_0x16e3();return _0x31f8=function(_0x31f8c7,_0x325d09){_0x31f8c7=_
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); this finding generalizes to all versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x31f8(_0x30a25a,_0x32862e){const _0x16e3ed=_0x16e3();return _0x31f8=function(_0x31f8c7,_0x325d09){_0x31f8c7=_
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x31f8(_0x30a25a,_0x32862e){const _0x16e3ed=_0x16e3();return _0x31f8=function(_0x31f8c7,_0x325d09){_0x31f8c7=_
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); this finding generalizes to all versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x583d28=_0x1e8e;function _0x1e8e(_0x1bef03,_0x2a7eef){const _0xce5e69=_0xce5e();return _0x1e8e=function(_0x1e8e2
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x318f(){var _0x8b1cc2=['_options','syntaxLanguage','setTemplate','element','change:isReadOnly','div','6161312
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); this finding generalizes to all versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x318f(){var _0x8b1cc2=['_options','syntaxLanguage','setTemplate','element','change:isReadOnly','div','6161312
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x318f(){var _0x8b1cc2=['_options','syntaxLanguage','setTemplate','element','change:isReadOnly','div','6161312
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); this finding generalizes to all versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x14a4e8=_0x281c;(function(_0x22594a,_0x5206e9){const _0x2b150e=_0x281c,_0xcfa1d0=_0x22594a();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x14a4e8=_0x281c;(function(_0x22594a,_0x5206e9){const _0x2b150e=_0x281c,_0xcfa1d0=_0x22594a();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x14a4e8=_0x281c;(function(_0x22594a,_0x5206e9){const _0x2b150e=_0x281c,_0xcfa1d0=_0x22594a();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); this finding generalizes to all versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x150232,_0x49027a){const _0x171317=_0x4674,_0x4da2f7=_0x150232();while(!![]){try{const _0x4fb4fb=-parseInt(_
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x150232,_0x49027a){const _0x171317=_0x4674,_0x4da2f7=_0x150232();while(!![]){try{const _0x4fb4fb=-parseInt(_
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x150232,_0x49027a){const _0x171317=_0x4674,_0x4da2f7=_0x150232();while(!![]){try{const _0x4fb4fb=-parseInt(_
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); this finding generalizes to all versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x157d39,_0x115cc3){var _0x5d6fcd=_0x5b02,_0x4ba4d5=_0x157d39();while(!![]){try{var _0x428946=parseInt(_0x5d6
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x157d39,_0x115cc3){var _0x5d6fcd=_0x5b02,_0x4ba4d5=_0x157d39();while(!![]){try{var _0x428946=parseInt(_0x5d6
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x157d39,_0x115cc3){var _0x5d6fcd=_0x5b02,_0x4ba4d5=_0x157d39();while(!![]){try{var _0x428946=parseInt(_0x5d6
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); this finding generalizes to all versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x1d337e,_0x3b4d46){const _0x10bb99=_0x4966,_0x4ffb40=_0x1d337e();while(!![]){try{const _0x1830b7=-parseInt(_
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x1d337e,_0x3b4d46){const _0x10bb99=_0x4966,_0x4ffb40=_0x1d337e();while(!![]){try{const _0x1830b7=-parseInt(_
[Reject — re-review on republish] (prior reject: AI (semgrep): Package explicitly ships obfuscated source (obfuscated:true in package.json); hex-function obfuscation is intentional and generalizes to all versions.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x1d337e,_0x3b4d46){const _0x10bb99=_0x4966,_0x4ffb40=_0x1d337e();while(!![]){try{const _0x1830b7=-parseInt(_
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.