@epic-web/workshop-app
The **Epic Workshop App** is the React Router v7 web application that powers the local workshop experience (exercises, steps, diffs, videos, progress, etc.).
4
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
kettanaitokentcdoddsepic-web-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:build/client/assets/_baseUniq-CJZRE-e7.js | AI (source-diff): Standard Vite minified build artifact; content-hash filename pattern consistent across all versions of this package. | ai | |
| source-diff | obfuscated-file:build/client/assets/_exerciseNumber_.finished-B_T3PxJz.js | AI (source-diff): Standard Vite minified build artifact. | ai | |
| source-diff | obfuscated-file:build/client/assets/_exerciseNumber-BpbYIQzs.js | AI (source-diff): Standard Vite minified build artifact. | ai | |
| source-diff | obfuscated-file:build/client/assets/_extra-aa8Mks-Q.js | AI (source-diff): Standard Vite minified build artifact. | ai | |
| source-diff | obfuscated-file:build/client/assets/_layout-BbwYNNgC.js | AI (source-diff): Standard Vite minified build artifact. | ai | |
| source-diff | obfuscated-file:build/client/assets/_layout-qZA4Ghi8.js | AI (source-diff): Standard Vite minified build artifact. | ai | |
| source-diff | obfuscated-file:build/client/assets/abap-D4LQAb8f.js | AI (source-diff): Syntax-highlighter grammar file; minified JSON/regex patterns, not malicious. | ai | |
| source-diff | obfuscated-file:build/client/assets/account-DIt1vgkr.js | AI (source-diff): Standard Vite minified build artifact. | ai | |
| source-diff | net-exec-file:build/client/assets/blade-CxCEYJ45.js | AI (source-diff): Client-side syntax-highlighter grammar; network calls are fetch() for lazy-loading assets, not dropper behavior. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Package ships a full pre-built web app; large file counts are expected on every release. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): 464 versions in registry; the 721-day gap is a measurement artifact, not a real dormancy signal. | ai | |
| phantom-deps | phantom-dep:@epic-web/cachified | AI (phantom-deps): Same org scope; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@sentry/vite-plugin | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:msw | AI (phantom-deps): Config-file reference pattern; stable false positive for this workshop tooling package. | ai | |
| phantom-deps | phantom-dep:@react-router/remix-routes-option-adapter | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-toast | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:glob | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:open | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:execa | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:fkill | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:p-queue | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:cross-env | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@mdx-js/mdx | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:cross-spawn | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:vite-env-only | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:remix-flat-routes | AI (phantom-deps): Config-file reference pattern; stable false positive for this package. | ai |
Versions (showing 4 of 4)
| Version | Deps | Published |
|---|---|---|
| 6.90.3 | 79 / 36 | |
| 6.90.2 | 79 / 36 | |
| 6.90.1 | 79 / 36 | |
| 6.90.0 | 79 / 36 |
v6.90.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.90.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.90.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.