@elliemae/pui-diagnostics
10
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
encw.dev
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/public/js/emuiDiagnostics.3ff32b369a65c317af43.js | AI (source-diff): Standard minified UMD bundle for this diagnostics library; expected artifact across versions. | ai | |
| source-diff | net-exec-file:build/docs/assets/js/main.121433ae.js | AI (source-diff): Network+exec pattern fires on React router/fetch in docs bundle; no malicious payload evident. | ai | |
| source-diff | obfuscated-file:build/docs/assets/js/main.121433ae.js | AI (source-diff): Docusaurus/webpack docs site bundle; normal minified output for this package. | ai | |
| source-diff | obfuscated-file:dist/public/js/emuiDiagnostics.df31ffe1cc56ffda02bf.js | AI (source-diff): Standard webpack minified bundle with source map; expected build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/public/js/emuiDiagnostics.7213fbad094b55ca3223.js | AI (source-diff): Standard minified UMD library bundle; consistent with this package's build output across versions. | ai | |
| source-diff | net-exec-file:build/docs/assets/js/main.7ba1beee.js | AI (source-diff): Network calls in docs bundle are React/Docusaurus routing; no dropper behavior evident in sample. | ai | |
| source-diff | obfuscated-file:build/docs/assets/js/main.7ba1beee.js | AI (source-diff): Docusaurus documentation site webpack bundle; benign build artifact for this package. | ai |
Versions (showing 10 of 10)
| Version | Deps | Published |
|---|---|---|
| 3.12.3 | 2 / 9 | |
| 3.12.2 | 2 / 9 | |
| 3.12.1 | 2 / 9 | |
| 3.11.3 | 2 / 9 | |
| 3.11.2 | 2 / 9 | |
| 3.11.1 | 2 / 9 | |
| 3.11.0 | 2 / 9 | |
| 3.10.1 | 2 / 6 | |
| 3.10.0 | 2 / 6 | |
| 3.5.2 | 2 / 8 |
v3.5.2
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.