@everymatrix/casino-challenge-details
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-3d4b40fc.js | AI (source-diff): Minified Stencil bundle; non-minified esm twin confirms benign CSS-fetch logic, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-f50b70d2.js | AI (source-diff): CJS build output of same benign module. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-3d4b40fc.js | AI (source-diff): Same bundle, unminified — confirms benign client-styling code. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-167be1bf.js | AI (source-diff): Bundled Stencil/Rollup output, not obfuscation; readable source with benign CSS-fetch helper. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-ac6a04ba.js | AI (source-diff): ESM bundle output mirrors CJS version; standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-ac6a04ba.js | AI (source-diff): Minified build artifact of same benign widget code, no malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-adeefa38.js | AI (source-diff): Minified bundler output, not obfuscation; no malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-adeefa38.js | AI (source-diff): Minified bundler output, not obfuscation; no malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-4f38bd81.js | AI (source-diff): Minified bundler output, not obfuscation; no malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-f380eb66.js | AI (source-diff): Minified bundler output, code is readable widget CSS-loading logic. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-f380eb66.js | AI (source-diff): Minified bundler output, same source as cjs/esm counterparts. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-a8d72fce.js | AI (source-diff): Bundled build output, not obfuscation; consistent with prior versions' dist files. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-7809cffd.js | AI (source-diff): Standard minified Stencil bundle output; consistent with package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-7809cffd.js | AI (source-diff): Standard minified Stencil ESM bundle output; consistent with package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-6b649e81.js | AI (source-diff): Standard minified Stencil bundle output; consistent with package's established build pattern across 286 versions. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Internal @everymatrix team transition; publisher has extensive approved track record. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-8f737e06.js | AI (source-diff): ESM build output matching CJS counterpart; standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-8f737e06.js | AI (source-diff): Stencil.js lazy-load bundle; minified but benign widget code. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-8c125023.js | AI (source-diff): Standard Stencil.js CJS build output with readable source; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-1ecbe310.js | AI (source-diff): Standard Stencil.js ESM build artifact; unminified variant confirms legitimate widget code. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-1ecbe310.js | AI (source-diff): Standard Stencil.js minified build artifact; content is legitimate widget code. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-7f9a94a9.js | AI (source-diff): Standard Stencil.js CJS build artifact; content matches legitimate widget code. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-c096ce9a.js | AI (source-diff): Standard CJS build artifact matching ESM source; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-1496580b.js | AI (source-diff): Standard Stencil.js minified bundle; readable ESM counterpart confirms no obfuscation intent. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-1496580b.js | AI (source-diff): Readable ESM build artifact with JSDoc; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-a3f382a5.js | AI (source-diff): Standard Stencil.js minified build output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-a3f382a5.js | AI (source-diff): Standard Stencil.js minified build output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-0769d9f5.js | AI (source-diff): Standard Stencil.js minified build output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details_5.entry.js | AI (source-diff): Standard Stencil.js ESM minified build output; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-50bbf289.js | AI (source-diff): Minified Stencil bundle with readable i18n strings and widget logic; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-50bbf289.js | AI (source-diff): ESM Stencil bundle with full JSDoc comments visible; standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-e98d928b.js | AI (source-diff): CJS Stencil bundle with JSDoc comments; standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details_5.cjs.entry.js | AI (source-diff): Standard Stencil.js minified build output with inlined SVG data URIs; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details_5.entry.js | AI (source-diff): Standard Stencil.js minified build output; readable logic visible in samples. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-45d1afce.js | AI (source-diff): Standard Rollup/Stencil minified build output for this widget package; consistent across versions. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-a4a5791f.js | AI (source-diff): Standard Rollup/Stencil minified build output for this widget package; consistent across versions. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-a4a5791f.js | AI (source-diff): Standard Rollup/Stencil minified build output for this widget package; consistent across versions. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-da7717b1.js | AI (source-diff): Standard Rollup/Stencil minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-da7717b1.js | AI (source-diff): Standard Rollup/Stencil minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-433a9f36.js | AI (source-diff): Standard Rollup/Stencil minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-17a297f6.js | AI (source-diff): Standard Stencil.js minified bundle; no malicious payload in samples. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-b7aae25f.js | AI (source-diff): Standard Stencil.js minified bundle; no malicious payload in samples. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-17a297f6.js | AI (source-diff): Standard Stencil.js minified bundle; no malicious payload in samples. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-252d9b9c.js | AI (source-diff): Standard Stencil.js ESM minified build output; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-df1d40f7.js | AI (source-diff): Standard Stencil.js CJS minified build output; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-252d9b9c.js | AI (source-diff): Standard Stencil.js minified build output; consistent with all prior versions of this package. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-4e26ab78.js | AI (source-diff): Standard Stencil.js ESM minified bundle; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/index-30adf0cb.js | AI (source-diff): Stencil runtime bundle; minified but benign, consistent with this package family. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-63ae2c71.js | AI (source-diff): Standard Stencil.js CJS minified bundle; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-4e26ab78.js | AI (source-diff): Standard Stencil.js minified bundle; consistent with all prior @everymatrix widget releases. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-9620e5ea.js | AI (source-diff): Standard Rollup/Stencil minified bundle output; consistent with all prior @everymatrix widget releases. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-9620e5ea.js | AI (source-diff): Standard Rollup/Stencil minified bundle output; consistent with all prior @everymatrix widget releases. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-15b555ef.js | AI (source-diff): Standard Rollup/Stencil minified bundle output; consistent with all prior @everymatrix widget releases. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-00cd9c3e.js | AI (source-diff): Standard Stencil.js minified bundle for this widget family; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-7465690c.js | AI (source-diff): Standard Stencil.js CJS minified bundle; readable source confirms no malicious content. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-00cd9c3e.js | AI (source-diff): Standard Stencil.js ESM minified bundle; readable source confirms no malicious content. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-92840935.js | AI (source-diff): Standard minified Stencil build output; consistent pattern across all @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-92840935.js | AI (source-diff): Standard minified Stencil build output; consistent pattern across all @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-54898daf.js | AI (source-diff): Standard minified Stencil build output; consistent pattern across all @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-6d8eeca9.js | AI (source-diff): Standard Stencil.js minified build output; consistent with all prior @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-6d8eeca9.js | AI (source-diff): Standard Stencil.js minified build output; consistent with all prior @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-3c309aa3.js | AI (source-diff): Standard Stencil.js minified build output; consistent with all prior @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/index-662208df.js | AI (source-diff): Stencil runtime bundle; minified but recognizable Stencil.js internals, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-97bf6e45.js | AI (source-diff): Standard Stencil.js minified build artifact; consistent with established @everymatrix widget build pipeline. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/index-a44346bc.js | AI (source-diff): Stencil.js runtime bundle; minification is expected for this package family. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-cdbe115b.js | AI (source-diff): Standard Stencil.js minified build artifact; consistent with established @everymatrix widget build pipeline. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-97bf6e45.js | AI (source-diff): Standard Stencil.js minified build artifact; consistent with established @everymatrix widget build pipeline. | ai | |
| source-diff | obfuscated-file:dist/casino-challenge-details/casino-challenge-details-26135f0c.js | AI (source-diff): Standard minified browser bundle; readable logic, no malicious patterns. Stable for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenge-details-26135f0c.js | AI (source-diff): Standard minified ESM build artifact; readable logic, no malicious patterns. Stable for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenge-details-16fc391a.js | AI (source-diff): Standard minified Stencil build artifact; readable logic, no malicious patterns. Stable for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped org widget package published via CI; sparse metadata is normal for this package family. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Consistent pattern across 228 versions of this org's widget packages. | ai | |
| provenance | no-provenance | AI (provenance): No provenance is common; no other risk signals present. | ai |
Versions (showing 51 of 317)
| Version | Deps | Published |
|---|---|---|
| 0.17.81 | 0 / 0 | |
| 0.17.80 | 0 / 0 | |
| 0.17.79 | 0 / 0 | |
| 0.17.78 | 0 / 0 | |
| 0.17.77 | 0 / 0 | |
| 0.17.76 | 0 / 0 | |
| 0.17.75 | 0 / 0 | |
| 0.17.74 | 0 / 0 | |
| 0.17.73 | 0 / 0 | |
| 0.17.72 | 0 / 0 | |
| 0.17.71 | 0 / 0 | |
| 0.17.70 | 0 / 0 | |
| 0.17.69 | 0 / 0 | |
| 0.17.68 | 0 / 0 | |
| 0.17.67 | 0 / 0 | |
| 0.17.66 | 0 / 0 | |
| 0.17.65 | 0 / 0 | |
| 0.17.64 | 0 / 0 | |
| 0.17.63 | 0 / 0 | |
| 0.17.62 | 0 / 0 | |
| 0.17.61 | 0 / 0 | |
| 0.17.60 | 0 / 0 | |
| 0.17.59 | 0 / 0 | |
| 0.17.58 | 0 / 0 | |
| 0.17.57 | 0 / 0 | |
| 0.17.56 | 0 / 0 | |
| 0.17.55 | 0 / 0 | |
| 0.17.54 | 0 / 0 | |
| 0.17.53 | 0 / 0 | |
| 0.17.52 | 0 / 0 | |
| 0.17.51 | 0 / 0 | |
| 0.17.50 | 0 / 0 | |
| 0.17.49 | 0 / 0 | |
| 0.17.48 | 0 / 0 | |
| 0.17.47 | 0 / 0 | |
| 0.17.46 | 0 / 0 | |
| 0.17.45 | 0 / 0 | |
| 0.17.44 | 0 / 0 | |
| 0.17.43 | 0 / 0 | |
| 0.17.42 | 0 / 0 | |
| 0.17.41 | 0 / 0 | |
| 0.17.40 | 0 / 0 | |
| 0.17.39 | 0 / 0 | |
| 0.17.38 | 0 / 0 | |
| 0.17.37 | 0 / 0 | |
| 0.17.36 | 0 / 0 | |
| 0.17.35 | 0 / 0 | |
| 0.17.34 | 0 / 0 | |
| 0.17.33 | 0 / 0 | |
| 0.17.32 | 0 / 0 | |
| 0.17.31 | 0 / 0 |
v0.17.81
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.80
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.79
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.78
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.77
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.76
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.75
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.74
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.73
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.72
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.71
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.70
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.69
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.68
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.67
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.66
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.65
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.64
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.63
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.62
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.61
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.60
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.59
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.58
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.57
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.56
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.55
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.54
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.53
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.