@everymatrix/cashier-error
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:components/CashierError-Bmp02hIK.js | AI (source-diff): Minified bundler output, not true obfuscation; consistent with prior versions. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Internal org maintainer rotation, publisher has strong track record. | ai | |
| source-diff | obfuscated-file:components/CashierError-DBMQNq6p.cjs | AI (source-diff): Minified CJS bundle, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-C4SN3tkt.js | AI (source-diff): Minified bundler output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-BRRP4Gfd.cjs | AI (source-diff): Minified Stencil/Svelte build output; no true obfuscation indicators. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:components/CashierError-C3Z7n-hx.js | AI (source-diff): Minified Stencil/Svelte build output; no true obfuscation indicators. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:components/CashierError-B6xZMaYy.js | AI (source-diff): Minified Stencil/Svelte build output; no true obfuscation indicators. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:components/CashierError-D0ilxxw-.cjs | AI (source-diff): Minified Stencil/Svelte bundle output; no true obfuscation indicators, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:components/CashierError-ueWr7DsF.js | AI (source-diff): Minified Stencil/Svelte bundle output; no true obfuscation indicators, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:components/CashierError-CWyXDmZK.js | AI (source-diff): Minified Stencil/Svelte bundle output; no true obfuscation indicators, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:components/CashierError-BV7Ktd8d.js | AI (source-diff): Standard minified Svelte/Stencil build output; consistent with this package's established build artifact pattern. | ai | |
| source-diff | obfuscated-file:components/CashierError-Cl-Z77eA.js | AI (source-diff): Standard minified Svelte/Stencil build output; consistent with this package's established build artifact pattern. | ai | |
| source-diff | obfuscated-file:components/CashierError-CxIH_nOM.cjs | AI (source-diff): Standard minified Svelte/Stencil build output; consistent with this package's established build artifact pattern. | ai | |
| source-diff | obfuscated-file:components/CashierError-Bupr3kgq.js | AI (source-diff): Standard Stencil/Svelte build bundle with hashed filename; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-DGO7RbEg.js | AI (source-diff): Standard Stencil/Svelte build bundle with hashed filename; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-l26mpTff.cjs | AI (source-diff): Standard Stencil/Svelte build bundle with hashed filename; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-CEvcsD0e.js | AI (source-diff): Standard ESM build output from Svelte/Stencil component bundler; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-N84MzyRA.js | AI (source-diff): Standard ESM build output from Svelte/Stencil component bundler; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-QRJMXJ21.cjs | AI (source-diff): Standard CJS build output from Svelte/Stencil component bundler; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-Ak6bkMp4.js | AI (source-diff): Standard ESM build output from Svelte/Stencil bundler; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-Zgfqyr0T.js | AI (source-diff): Standard ESM build output from Svelte/Stencil bundler; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-c_jrgBMH.cjs | AI (source-diff): Standard CJS build output from Svelte/Stencil bundler; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/CashierError-9i_njvWZ.js | AI (source-diff): Standard Svelte/Stencil bundler output; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:components/CashierError-CjUqk0KH.cjs | AI (source-diff): Standard Svelte/Stencil bundler output; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:components/CashierError-DLf2pjbY.js | AI (source-diff): Standard Svelte/Stencil bundler output; stable pattern for this package. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Scoped org package with 472 versions; missing description is cosmetic. | ai | |
| source-diff | obfuscated-file:components/CashierError-DrQTtfgS.cjs | AI (source-diff): Minified Stencil/Svelte bundle output; standard for this UI component package across all versions. | ai | |
| source-diff | obfuscated-file:components/CashierError-CmjnBzFO.js | AI (source-diff): Minified Stencil/Svelte bundle output; standard for this UI component package across all versions. | ai | |
| source-diff | obfuscated-file:components/CashierError-C7AbW279.js | AI (source-diff): Minified Stencil/Svelte bundle output; standard for this UI component package across all versions. | ai | |
| source-diff | obfuscated-file:components/CashierError-D_Xh3zbl.js | AI (source-diff): Standard Svelte/Vite minified bundle output; consistent pattern across all versions of this component package. | ai | |
| source-diff | obfuscated-file:components/CashierError-BPnTLNxO.js | AI (source-diff): Standard Svelte/Vite minified bundle output; consistent pattern across all versions of this component package. | ai | |
| source-diff | obfuscated-file:components/CashierError-_3sf3GlB.cjs | AI (source-diff): Standard Svelte/Vite minified bundle output; consistent pattern across all versions of this component package. | ai | |
| provenance | publisher-changed | AI (provenance): adrian.pripon is an established publisher (11k+ approvals) in the same @everymatrix org; transition appears legitimate. | ai | |
| source-diff | obfuscated-file:components/CashierError-2Z1_ph1-.js | AI (source-diff): Standard minified Svelte bundle output; consistent pattern across all versions of this component package. | ai | |
| source-diff | obfuscated-file:components/CashierError-Dbubo4Rq.js | AI (source-diff): Standard minified Svelte bundle output; consistent pattern across all versions of this component package. | ai | |
| source-diff | obfuscated-file:components/CashierError-DpXUW93C.cjs | AI (source-diff): Standard minified Svelte bundle output; consistent pattern across all versions of this component package. | ai | |
| source-diff | obfuscated-file:components/CashierError-BSaEmMwj.js | AI (source-diff): Standard minified Svelte/Stencil bundle output; consistent with package's established build pattern. | ai | |
| source-diff | obfuscated-file:components/CashierError-BXTCkMqv.js | AI (source-diff): Standard minified Svelte/Stencil bundle output; consistent with package's established build pattern. | ai | |
| source-diff | obfuscated-file:components/CashierError-BO6tukN9.cjs | AI (source-diff): Standard minified Svelte/Stencil bundle output; consistent with package's established build pattern. | ai | |
| source-diff | obfuscated-file:components/CashierError-C_8CWLBb.js | AI (source-diff): Minified Svelte/Stencil build artifact; consistent pattern across all versions of this component package. | ai | |
| source-diff | obfuscated-file:components/CashierError-CV7FQUz7.js | AI (source-diff): Minified Svelte/Stencil build artifact; consistent pattern across all versions of this component package. | ai | |
| source-diff | obfuscated-file:components/CashierError-BDpxK42o.cjs | AI (source-diff): Minified Svelte/Stencil build artifact; consistent pattern across all versions of this component package. | ai | |
| source-diff | obfuscated-file:components/CashierError-DcaLEArf.js | AI (source-diff): Standard Rollup/Vite minified output for a Svelte UI component; no malicious patterns present. | ai | |
| source-diff | obfuscated-file:components/CashierError-CYR_xAUh.cjs | AI (source-diff): Standard Rollup/Vite minified output for a Svelte UI component; no malicious patterns present. | ai | |
| source-diff | obfuscated-file:components/CashierError-C0hL9h3N.js | AI (source-diff): Standard Rollup/Vite minified output for a Svelte UI component; no malicious patterns present. | ai | |
| source-diff | obfuscated-file:components/CashierError-ByIHg49f.js | AI (source-diff): Standard Stencil/Svelte minified build artifact; consistent with prior versions of this component library. | ai | |
| source-diff | obfuscated-file:components/CashierError-_Gj_uTMS.cjs | AI (source-diff): Standard Stencil/Svelte minified build artifact; consistent with prior versions of this component library. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped internal component library; no repo/description/keywords is expected for private org packages. | ai | |
| source-diff | obfuscated-file:components/CashierError-DmgAx-O6.js | AI (source-diff): Standard Stencil/Svelte minified build artifact; consistent with prior versions of this component library. | ai |
Versions (showing 51 of 454)
| Version | Deps | Published |
|---|---|---|
| 1.94.81 | 0 / 0 | |
| 1.94.66 | 0 / 0 | |
| 1.94.65 | 0 / 0 | |
| 1.94.64 | 0 / 0 | |
| 1.94.63 | 0 / 0 | |
| 1.94.62 | 0 / 0 | |
| 1.94.61 | 0 / 0 | |
| 1.94.60 | 0 / 0 | |
| 1.94.59 | 0 / 0 | |
| 1.94.58 | 0 / 0 | |
| 1.94.57 | 0 / 0 | |
| 1.94.56 | 0 / 0 | |
| 1.94.55 | 0 / 0 | |
| 1.94.54 | 0 / 0 | |
| 1.94.53 | 0 / 0 | |
| 1.94.52 | 0 / 0 | |
| 1.94.51 | 0 / 0 | |
| 1.94.50 | 0 / 0 | |
| 1.94.49 | 0 / 0 | |
| 1.94.48 | 0 / 0 | |
| 1.94.47 | 0 / 0 | |
| 1.94.46 | 0 / 0 | |
| 1.94.45 | 0 / 0 | |
| 1.94.44 | 0 / 0 | |
| 1.94.43 | 0 / 0 | |
| 1.94.42 | 0 / 0 | |
| 1.94.41 | 0 / 0 | |
| 1.94.40 | 0 / 0 | |
| 1.94.39 | 0 / 0 | |
| 1.94.38 | 0 / 0 | |
| 1.94.37 | 0 / 0 | |
| 1.94.36 | 0 / 0 | |
| 1.94.35 | 0 / 0 | |
| 1.94.34 | 0 / 0 | |
| 1.94.33 | 0 / 0 | |
| 1.94.32 | 0 / 0 | |
| 1.94.31 | 0 / 0 | |
| 1.94.30 | 0 / 0 | |
| 1.94.29 | 0 / 0 | |
| 1.94.28 | 0 / 0 | |
| 1.94.27 | 0 / 0 | |
| 1.94.26 | 0 / 0 | |
| 1.94.25 | 0 / 0 | |
| 1.94.24 | 0 / 0 | |
| 1.94.23 | 0 / 0 | |
| 1.94.22 | 0 / 0 | |
| 1.94.21 | 0 / 0 | |
| 1.94.20 | 0 / 0 | |
| 1.94.19 | 0 / 0 | |
| 1.94.18 | 0 / 0 | |
| 1.94.17 | 0 / 0 |
v1.94.81
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.66
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.65
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.64
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.63
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.62
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.61
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.60
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.59
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.58
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.56
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.55
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.54
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.53
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.