@codemation/core-nodes-gmail
Optional Gmail integration for Codemation. The package is intentionally trigger-first:
22
Versions
SEE LICENSE IN LICENSE
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
cblokland
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/index-CBDXvswQ.d.cts | AI (source-diff): TypeScript declaration file with long union-type lines; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/index-064i2ite.d.ts | AI (source-diff): TypeScript declaration file with long union-type lines; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/index-DmtuzKud.d.ts | AI (source-diff): Same pattern: bundled .d.ts with long type union lines, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-_q-Ftahd.d.cts | AI (source-diff): Long-line TypeScript declaration file generated by tsdown bundler; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/index-DMY_Vbj1.d.ts | AI (source-diff): Same as above — bundled .d.ts declaration file, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/index-B8KcDOJP.d.ts | AI (source-diff): TypeScript declaration file with long lines from complex type unions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/index-CkPqhblz.d.cts | AI (source-diff): TypeScript declaration file with long lines from complex type unions; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/index-HcsMi90I.d.ts | AI (source-diff): Same bundled .d.ts declaration file; long lines are type unions, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/index-yczl4N0d.d.cts | AI (source-diff): Long-line TypeScript declaration rollup from tsdown; not obfuscation. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by bundling all deps into plugin CJS/ESM artifacts via tsdown. | ai | |
| source-diff | net-exec-file:dist/codemation.plugin.cjs | AI (source-diff): Bundled plugin artifact (tsdown/rolldown output) with googleapis/LangChain deps; no actual dropper behavior in samples. | ai | |
| source-diff | net-exec-file:dist/codemation.plugin.js | AI (source-diff): ESM counterpart of the same bundled plugin; standard bundler output, not malware. | ai | |
| source-diff | obfuscated-file:dist/index-BWOh-rJe.d.cts | AI (source-diff): TypeScript declaration file with long union/interface lines; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/index-Bj5kbvLY.d.ts | AI (source-diff): TypeScript declaration file with long union/interface lines; not obfuscated code. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher is GitHub Actions with SLSA attestation; CI/CD publishing is the documented workflow for this org. | ai | |
| source-diff | obfuscated-file:dist/index-J-XYipso.d.ts | AI (source-diff): Same pattern: bundled .d.ts declaration file, long lines from type bundling, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/index-BuSfKJYe.d.cts | AI (source-diff): Bundled TypeScript declaration file with long lines from rolldown; readable type definitions, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index--gtTN-A2.d.ts | AI (source-diff): Same as above — rolldown/tsdown-generated .d.ts with inlined types; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/index-DRjOEOl6.d.cts | AI (source-diff): Bundler-generated TypeScript declaration file; long lines are inlined type definitions, not obfuscated executable code. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Decoding Gmail API message payloads (base64url); legitimate and expected for a Gmail integration package. | ai |
Versions (showing 22 of 22)
| Version | Deps | Published |
|---|---|---|
| 0.2.4 | 4 / 11 | |
| 0.2.3 | 4 / 11 | |
| 0.2.2 | 3 / 10 | |
| 0.2.1 | 3 / 10 | |
| 0.2.0 | 3 / 8 | |
| 0.1.7 | 2 / 6 | |
| 0.1.6 | 2 / 6 | |
| 0.1.5 | 2 / 6 | |
| 0.1.4 | 2 / 6 | |
| 0.1.3 | 2 / 6 | |
| 0.1.2 | 2 / 6 | |
| 0.1.1 | 2 / 6 | |
| 0.0.15 | 2 / 6 | |
| 0.0.14 | 2 / 6 | |
| 0.0.13 | 2 / 6 | |
| 0.0.11 | 2 / 6 | |
| 0.0.7 | 2 / 6 | |
| 0.0.5 | 2 / 6 | |
| 0.0.4 | 2 / 6 | |
| 0.0.3 | 2 / 6 | |
| 0.0.2 | 2 / 6 | |
| 0.0.1 | 2 / 6 |