@clef-sh/ui
Local web UI for Clef — git-native secrets management
16
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
spandrelsys
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/client/assets/index-Db6WgHgY.js | AI (source-diff): Vite-bundled React client asset; minified output is expected for this UI package. | ai | |
| source-diff | obfuscated-file:dist/client/assets/index-YcTmzmJ5.js | AI (source-diff): Standard Vite/React minified bundle output; not malicious obfuscation. Expected artifact for this UI package. | ai | |
| source-diff | obfuscated-file:dist/client/assets/index-DA0UG2qb.js | AI (source-diff): Standard Vite-minified React bundle; long lines are normal minification output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/client/assets/index-BpvAgeMe.js | AI (source-diff): Standard Vite-minified React bundle; long lines are expected minification output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/client/assets/index-BVC8eF9m.js | AI (source-diff): Standard Vite/React minified bundle output; not malicious obfuscation. Stable pattern for this UI package. | ai | |
| source-diff | obfuscated-file:dist/client/assets/index-DPWHjBbB.js | AI (source-diff): Standard Vite/React minified client bundle; not obfuscation. Stable pattern for this UI package. | ai | |
| source-diff | obfuscated-file:dist/client/assets/index-BvjtHXyF.js | AI (source-diff): Vite-minified React client bundle; long lines are standard minification output, not obfuscation. | ai | |
| typosquat | typosquat.levenshtein:uuid | AI (typosquat): Scoped package @clef-sh/ui; Levenshtein match to uuid is a false positive for this namespace. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped package @clef-sh/ui; Levenshtein match to yup is a false positive for this namespace. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped package @clef-sh/ui; Levenshtein match to joi is a false positive for this namespace. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped package @clef-sh/ui; Levenshtein match to qs is a false positive for this namespace. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped package @clef-sh/ui; Levenshtein match to pg is a false positive for this namespace. | ai |