@epic-web/workshop-utils
Shared utilities for the Epic Workshop ecosystem.
100
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
kettanaitokentcdoddsepic-web-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/launch-editor.server.js | AI (source-diff): File is readable source copied from CRA's launchEditor.js; long lines are editor-path maps, not obfuscation. | ai | |
| provenance | publisher-changed | AI (provenance): Package publishes via GitHub Actions CI with SLSA attestation; kentcdodds→GHA is the expected automated publishing transition. | ai | |
| source-diff | obfuscated-file:dist/esm/launch-editor.server.js | AI (source-diff): Long lines are from a large object literal (editor path map), not obfuscation; code is readable and sourced from create-react-app. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): shell-quote is a well-known safe argument-quoting utility, directly used in launch-editor.server.js. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Utility library for epicshop workshop tooling; sparse README/no keywords is a style choice, not a spam signal. | ai | |
| dependencies | unvetted-dep:@types/chai | AI (dependencies): TypeScript type definitions package; no runtime risk. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): SLSA provenance attestation via GitHub Actions CI/CD mitigates account-takeover risk; no material changes from prior version. | ai | |
| dependencies | unvetted-dep:@react-router/node | AI (dependencies): Official @react-router scoped package from the React Router ecosystem; legitimate dependency. | ai | |
| phantom-deps | phantom-dep:@types/chai | AI (phantom-deps): Framework-scoped type package; loaded by convention. | ai | |
| phantom-deps | phantom-dep:@types/chai-dom | AI (phantom-deps): Framework-scoped type package; loaded by convention. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): Workshop utils package; react is a peer/config-referenced dep, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:mdast-util-mdx-jsx | AI (phantom-deps): MDX AST utility; used via plugin chain, not direct import. | ai | |
| phantom-deps | phantom-dep:unist-util-remove-position | AI (phantom-deps): Unist utility; used via plugin chain, not direct import. | ai | |
| phantom-deps | phantom-dep:@react-router/node | AI (phantom-deps): Config-referenced dep; stable false positive for this workshop utils package. | ai | |
| phantom-deps | phantom-dep:pkgmgr | AI (phantom-deps): Referenced in config files; consistent with workshop tooling pattern. | ai | |
| phantom-deps | phantom-dep:rehype | AI (phantom-deps): MDX/markdown processing dep used via config/plugin chain, not direct import. | ai | |
| phantom-deps | phantom-dep:remark | AI (phantom-deps): MDX/markdown processing dep used via config/plugin chain, not direct import. | ai | |
| phantom-deps | phantom-dep:esbuild | AI (phantom-deps): Known implicit runtime/binary dependency; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:unified | AI (phantom-deps): MDX pipeline dep; loaded by convention, not direct import. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): Config-referenced peer dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@mdx-js/mdx | AI (phantom-deps): MDX compilation dep; used via config, not direct import. | ai |
Versions (showing 100 of 258)
| Version | Deps | Published |
|---|---|---|
| 6.51.0 | 51 / 8 | |
| 6.50.10 | 51 / 8 | |
| 6.50.2 | 51 / 8 | |
| 6.50.0 | 51 / 8 | |
| 6.49.3 | 51 / 8 | |
| 6.48.2 | 51 / 8 | |
| 6.48.1 | 51 / 8 | |
| 6.47.11 | 51 / 8 | |
| 6.47.6 | 51 / 8 | |
| 6.47.5 | 51 / 8 | |
| 6.47.4 | 51 / 8 | |
| 6.47.3 | 51 / 8 | |
| 6.47.2 | 51 / 8 | |
| 6.47.1 | 51 / 8 | |
| 6.47.0 | 51 / 8 | |
| 6.46.0 | 51 / 8 | |
| 6.45.7 | 51 / 8 | |
| 6.45.6 | 51 / 8 | |
| 6.45.5 | 51 / 8 | |
| 6.45.4 | 51 / 8 | |
| 6.45.3 | 51 / 8 | |
| 6.45.2 | 51 / 8 | |
| 6.45.1 | 51 / 8 | |
| 6.45.0 | 51 / 8 | |
| 6.44.0 | 51 / 8 | |
| 6.43.0 | 51 / 8 | |
| 6.42.0 | 51 / 8 | |
| 6.41.4 | 51 / 8 | |
| 6.41.3 | 51 / 8 | |
| 6.41.2 | 51 / 8 | |
| 6.41.1 | 51 / 8 | |
| 6.41.0 | 51 / 8 | |
| 6.40.3 | 52 / 8 | |
| 6.40.2 | 52 / 8 | |
| 6.40.1 | 52 / 8 | |
| 6.40.0 | 52 / 8 | |
| 6.39.0 | 52 / 8 | |
| 6.38.0 | 51 / 7 | |
| 6.37.1 | 51 / 7 | |
| 6.37.0 | 51 / 7 | |
| 6.36.1 | 51 / 7 | |
| 6.36.0 | 51 / 7 | |
| 6.35.3 | 51 / 7 | |
| 6.35.2 | 51 / 7 | |
| 6.35.1 | 51 / 7 | |
| 6.35.0 | 51 / 7 | |
| 6.34.0 | 51 / 7 | |
| 6.33.0 | 51 / 7 | |
| 6.32.3 | 51 / 7 | |
| 6.32.2 | 51 / 7 | |
| 6.32.1 | 51 / 7 | |
| 6.32.0 | 51 / 7 | |
| 6.31.0 | 51 / 7 | |
| 6.30.3 | 51 / 7 | |
| 6.30.2 | 51 / 7 | |
| 6.30.1 | 51 / 7 | |
| 6.30.0 | 51 / 7 | |
| 6.29.2 | 51 / 7 | |
| 6.29.1 | 51 / 7 | |
| 6.29.0 | 51 / 7 | |
| 6.28.1 | 51 / 7 | |
| 6.28.0 | 51 / 7 | |
| 6.27.5 | 51 / 7 | |
| 6.27.4 | 51 / 7 | |
| 6.27.3 | 51 / 7 | |
| 6.27.2 | 51 / 7 | |
| 6.27.1 | 51 / 7 | |
| 6.27.0 | 51 / 7 | |
| 6.26.0 | 51 / 7 | |
| 6.25.0 | 51 / 7 | |
| 6.24.3 | 51 / 7 | |
| 6.24.2 | 51 / 7 | |
| 6.24.1 | 51 / 7 | |
| 6.24.0 | 51 / 7 | |
| 6.23.16 | 51 / 7 | |
| 6.23.15 | 51 / 7 | |
| 6.23.14 | 51 / 7 | |
| 6.23.13 | 51 / 7 | |
| 6.23.12 | 51 / 7 | |
| 6.23.11 | 51 / 7 | |
| 6.23.10 | 51 / 7 | |
| 6.23.9 | 51 / 7 | |
| 6.23.8 | 51 / 7 | |
| 6.23.7 | 51 / 7 | |
| 6.23.6 | 51 / 7 | |
| 6.23.5 | 51 / 7 | |
| 6.23.4 | 51 / 7 | |
| 6.23.3 | 51 / 7 | |
| 6.23.2 | 51 / 7 | |
| 6.23.1 | 51 / 7 | |
| 6.23.0 | 51 / 7 | |
| 6.22.0 | 51 / 7 | |
| 6.21.0 | 51 / 7 | |
| 6.20.6 | 51 / 7 | |
| 6.20.5 | 51 / 7 | |
| 6.20.4 | 51 / 7 | |
| 6.20.3 | 51 / 7 | |
| 6.20.2 | 51 / 7 | |
| 6.20.1 | 51 / 7 | |
| 6.20.0 | 51 / 7 |
Showing 100 of 258
Next page →