@everymatrix/casino-challenges-overlay
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-5e111f1c.js | AI (source-diff): Bundled ESM build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-43a19d97.js | AI (source-diff): Bundled build output with readable comments, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-5e111f1c.js | AI (source-diff): Bundled Stencil/Rollup build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-5413414e.js | AI (source-diff): Standard Rollup minified bundle output for this Stencil widget package; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-e44d1628.js | AI (source-diff): CJS build artifact; same pattern as ESM counterpart, stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-5413414e.js | AI (source-diff): ESM build artifact with readable JSDoc comments; long-line heuristic false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-e43b403e.js | AI (source-diff): Standard Stencil.js minified build output. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/index-7fdd1cbf.js | AI (source-diff): Standard Stencil.js runtime bundle; consistent with established @everymatrix widget pattern. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-e43b403e.js | AI (source-diff): Standard Stencil.js minified build output. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-a75f839f.js | AI (source-diff): Standard Stencil.js minified build output. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-ac229a05.js | AI (source-diff): CJS counterpart of the same Stencil build; readable structure with JSDoc comments. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-75a7cbc9.js | AI (source-diff): Minified Stencil bundle; content is component logic, no exfiltration or shell patterns. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-75a7cbc9.js | AI (source-diff): Standard Stencil.js minified build output; ESM variant includes readable JSDoc, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-eef46bdb.js | AI (source-diff): Standard Stencil.js minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-2332b012.js | AI (source-diff): Standard Stencil.js minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay_2.entry.js | AI (source-diff): Standard Stencil.js minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay_2.entry.js | AI (source-diff): Standard Stencil.js minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay_2.cjs.entry.js | AI (source-diff): Standard Stencil.js minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/index-2be35f12.js | AI (source-diff): Standard Stencil.js runtime bundle; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-eef46bdb.js | AI (source-diff): Standard Stencil.js minified build output; consistent with this package's established build pattern. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-48b07cb1.js | AI (source-diff): Standard Rollup/Stencil minified build output for this widget package; consistent across all versions. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-48b07cb1.js | AI (source-diff): Standard Rollup/Stencil minified build output for this widget package; consistent across all versions. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-3f42bf67.js | AI (source-diff): Standard Rollup/Stencil minified build output for this widget package; consistent across all versions. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-f1ed1c93.js | AI (source-diff): Standard Stencil.js CJS minified bundle; no malicious patterns, readable source comments present. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-78a3b5f9.js | AI (source-diff): Standard Stencil.js minified bundle output; consistent with @everymatrix widget build pattern. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-78a3b5f9.js | AI (source-diff): Standard Stencil.js ESM minified bundle; no malicious patterns, readable source comments present. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-89a5469f.js | AI (source-diff): Minified widget bundle consistent with Stencil build pipeline used across this package family. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-77be149d.js | AI (source-diff): Standard Rollup/Stencil CJS bundle output; long lines are minified widget code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-89a5469f.js | AI (source-diff): Standard Rollup/Stencil ESM bundle output; same pattern as other @everymatrix widget packages. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-e801be58.js | AI (source-diff): Standard Rollup/Stencil minified build output; consistent with this widget package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/index-4cb6ae8e.js | AI (source-diff): Standard Stencil runtime bundle; minification pattern matches known Stencil output. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-e801be58.js | AI (source-diff): Standard Rollup/Stencil minified build output; consistent with this widget package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-3f4dc422.js | AI (source-diff): Standard Rollup/Stencil minified build output; consistent with this widget package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-68684fef.js | AI (source-diff): Standard Stencil.js ESM minified bundle; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-be7f1691.js | AI (source-diff): Standard Stencil.js CJS minified bundle; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-68684fef.js | AI (source-diff): Standard Stencil.js minified bundle; consistent with all prior @everymatrix package builds. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-9bb4cca8.js | AI (source-diff): Standard minified Stencil build bundle; pattern is stable across all versions of this package. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-9bb4cca8.js | AI (source-diff): Standard minified Stencil build bundle; pattern is stable across all versions of this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-4b5f57a1.js | AI (source-diff): Standard minified Stencil build bundle; pattern is stable across all versions of this package. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-a5ae48f5.js | AI (source-diff): Standard Stencil.js minified ESM build artifact; consistent with package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/index-be60b13e.js | AI (source-diff): Stencil.js runtime bundle (minified); consistent with package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-a5ae48f5.js | AI (source-diff): Standard Stencil.js minified bundle; consistent with package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-68ec1eb8.js | AI (source-diff): Standard Stencil.js minified build artifact; pattern is consistent across all versions of this widget package. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-5fcad42a.js | AI (source-diff): Standard Stencil minified build output; consistent pattern across all versions of this package. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-5fcad42a.js | AI (source-diff): Standard Stencil minified build output; consistent pattern across all versions of this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-365b73b3.js | AI (source-diff): Standard Stencil minified build output; consistent pattern across all versions of this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-6f01489c.js | AI (source-diff): Standard Rollup/Stencil minified bundle output; consistent with this package's build pattern across all versions. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-fd6ae571.js | AI (source-diff): Standard Rollup/Stencil minified bundle output; consistent with this package's build pattern across all versions. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-fd6ae571.js | AI (source-diff): Standard Rollup/Stencil minified bundle output; consistent with this package's build pattern across all versions. | ai | |
| source-diff | obfuscated-file:dist/casino-challenges-overlay/casino-challenges-overlay-0ab4098a.js | AI (source-diff): Standard Stencil.js minified bundle output; consistent pattern across all versions of this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/casino-challenges-overlay-9b3b30da.js | AI (source-diff): Readable CJS build artifact with comments; not obfuscated, just long lines from bundling. | ai | |
| source-diff | obfuscated-file:dist/esm/casino-challenges-overlay-0ab4098a.js | AI (source-diff): Readable ESM build artifact with comments; not obfuscated, just long lines from bundling. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped org widget package; no deps/description/keywords is normal for this component library pattern across 220 versions. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Consistent across all versions of this org's widget packages; not a malice indicator here. | ai |
Versions (showing 99 of 299)
| Version | Deps | Published |
|---|---|---|
| 0.10.1 | 0 / 0 | |
| 0.10.0 | 0 / 0 | |
| 0.9.30 | 0 / 0 | |
| 0.9.29 | 0 / 0 | |
| 0.9.28 | 0 / 0 | |
| 0.9.27 | 0 / 0 | |
| 0.9.26 | 0 / 0 | |
| 0.9.25 | 0 / 0 | |
| 0.9.24 | 0 / 0 | |
| 0.9.23 | 0 / 0 | |
| 0.9.22 | 0 / 0 | |
| 0.9.21 | 0 / 0 | |
| 0.9.20 | 0 / 0 | |
| 0.9.12 | 0 / 0 | |
| 0.9.11 | 0 / 0 | |
| 0.9.10 | 0 / 0 | |
| 0.9.9 | 0 / 0 | |
| 0.9.8 | 0 / 0 | |
| 0.9.7 | 0 / 0 | |
| 0.9.6 | 0 / 0 | |
| 0.9.5 | 0 / 0 | |
| 0.9.4 | 0 / 0 | |
| 0.9.3 | 0 / 0 | |
| 0.9.2 | 0 / 0 | |
| 0.9.1 | 0 / 0 | |
| 0.9.0 | 0 / 0 | |
| 0.8.23 | 0 / 0 | |
| 0.8.22 | 0 / 0 | |
| 0.8.21 | 0 / 0 | |
| 0.8.20 | 0 / 0 | |
| 0.8.19 | 0 / 0 | |
| 0.8.18 | 0 / 0 | |
| 0.8.17 | 0 / 0 | |
| 0.8.16 | 0 / 0 | |
| 0.8.15 | 0 / 0 | |
| 0.8.14 | 0 / 0 | |
| 0.8.13 | 0 / 0 | |
| 0.8.12 | 0 / 0 | |
| 0.8.11 | 0 / 0 | |
| 0.8.10 | 0 / 0 | |
| 0.8.9 | 0 / 0 | |
| 0.8.8 | 0 / 0 | |
| 0.8.7 | 0 / 0 | |
| 0.8.6 | 0 / 0 | |
| 0.8.5 | 0 / 0 | |
| 0.8.4 | 0 / 0 | |
| 0.8.3 | 0 / 0 | |
| 0.8.2 | 0 / 0 | |
| 0.8.1 | 0 / 0 | |
| 0.8.0 | 0 / 0 | |
| 0.7.3 | 0 / 0 | |
| 0.7.2 | 0 / 0 | |
| 0.7.1 | 0 / 0 | |
| 0.7.0 | 0 / 0 | |
| 0.6.12 | 0 / 0 | |
| 0.6.11 | 0 / 0 | |
| 0.6.10 | 0 / 0 | |
| 0.6.9 | 0 / 0 | |
| 0.6.8 | 0 / 0 | |
| 0.6.7 | 0 / 0 | |
| 0.6.6 | 0 / 0 | |
| 0.6.5 | 0 / 0 | |
| 0.6.4 | 0 / 0 | |
| 0.6.3 | 0 / 0 | |
| 0.6.2 | 0 / 0 | |
| 0.6.1 | 0 / 0 | |
| 0.6.0 | 0 / 0 | |
| 0.5.0 | 0 / 0 | |
| 0.4.2 | 0 / 0 | |
| 0.4.1 | 0 / 0 | |
| 0.4.0 | 0 / 0 | |
| 0.3.19 | 0 / 0 | |
| 0.3.18 | 0 / 0 | |
| 0.3.17 | 0 / 0 | |
| 0.3.16 | 0 / 0 | |
| 0.3.15 | 0 / 0 | |
| 0.3.14 | 0 / 0 | |
| 0.3.13 | 0 / 0 | |
| 0.3.12 | 0 / 0 | |
| 0.3.11 | 0 / 0 | |
| 0.3.10 | 0 / 0 | |
| 0.3.9 | 0 / 0 | |
| 0.3.8 | 0 / 0 | |
| 0.3.7 | 0 / 0 | |
| 0.3.6 | 0 / 0 | |
| 0.3.5 | 0 / 0 | |
| 0.3.4 | 0 / 0 | |
| 0.3.3 | 0 / 0 | |
| 0.3.2 | 0 / 0 | |
| 0.3.1 | 0 / 0 | |
| 0.3.0 | 0 / 0 | |
| 0.0.8 | 0 / 0 | |
| 0.0.7 | 0 / 0 | |
| 0.0.6 | 0 / 0 | |
| 0.0.5 | 0 / 0 | |
| 0.0.4 | 0 / 0 | |
| 0.0.3 | 0 / 0 | |
| 0.0.2 | 0 / 0 | |
| 0.0.1 | 0 / 0 |
v0.6.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.5.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.4.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.4.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.4.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.19
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.18
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.15
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.3.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.0.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.0.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.0.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.