@everymatrix/player-limit-notification-nd
34
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
clokzeoleksandr.v.stepanovtaras.maksymivnatalya.anisimovaemfe_releaserayiispmariana.gheorgheadrian.priponandriizadvirnyiraulvasileemstefan.vladgoe.sutadarie.tisaianustefanaotong.woodtikarncatalinpoclidcristi.ungureanumaria.bumbar1liviuclement.everymatrixmihaibalanfrankie24
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/player-limit-notification-nd/index-862a608b.js | AI (source-diff): Standard Stencil.js minified runtime bundle; not obfuscated malware. | ai | |
| source-diff | net-exec-file:dist/cjs/player-limit-notification-nd-42f11658.js | AI (source-diff): Network calls and dynamic execution are Stencil component lifecycle patterns, not dropper behavior. | ai | |
| source-diff | net-exec-file:dist/player-limit-notification-nd/player-limit-notification-nd-0680ef3d.js | AI (source-diff): Network calls and dynamic execution are Stencil component lifecycle patterns, not dropper behavior. | ai | |
| source-diff | net-exec-file:dist/esm/player-limit-notification-nd-0680ef3d.js | AI (source-diff): Network calls and dynamic execution are Stencil component lifecycle patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/cjs/player-limit-notification-nd-42f11658.js | AI (source-diff): Standard Stencil.js CJS minified bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/player-limit-notification-nd/player-limit-notification-nd-0680ef3d.js | AI (source-diff): Standard Stencil.js minified component bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/esm/player-limit-notification-nd-0680ef3d.js | AI (source-diff): Standard Stencil.js minified component bundle; not obfuscated malware. | ai | |
| source-diff | net-exec-file:dist/esm/player-limit-notification-nd-301ed683.js | AI (source-diff): Network calls are UI API fetches; dynamic execution is Stencil component registration — expected pattern. | ai | |
| source-diff | net-exec-file:dist/cjs/player-limit-notification-nd-dbd76fdb.js | AI (source-diff): CJS Stencil bundle; net+exec pattern is component hydration, not malware. | ai | |
| source-diff | obfuscated-file:dist/esm/player-limit-notification-nd-301ed683.js | AI (source-diff): Standard Stencil build output — minified but readable; no actual obfuscation or payload. | ai | |
| source-diff | obfuscated-file:dist/player-limit-notification-nd/player-limit-notification-nd-301ed683.js | AI (source-diff): Same Stencil build artifact; minification only, no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/player-limit-notification-nd-dbd76fdb.js | AI (source-diff): CJS Stencil build output; long lines from bundled translations, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/player-limit-notification-nd/player-limit-notification-nd-301ed683.js | AI (source-diff): Same as above; Stencil ESM bundle, not a dropper. | ai | |
| source-diff | obfuscated-file:dist/esm/player-limit-notification-nd-54aed6ff.js | AI (source-diff): Minified Stencil.js component bundle; readable content, not obfuscated malware. Stable pattern for this package. | ai | |
| source-diff | net-exec-file:dist/esm/player-limit-notification-nd-54aed6ff.js | AI (source-diff): Network calls and dynamic execution are part of the Stencil.js component framework, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/player-limit-notification-nd/player-limit-notification-nd-54aed6ff.js | AI (source-diff): Minified Stencil.js component bundle; readable content, not obfuscated malware. Stable pattern for this package. | ai | |
| source-diff | net-exec-file:dist/player-limit-notification-nd/player-limit-notification-nd-54aed6ff.js | AI (source-diff): Network calls and dynamic execution are part of the Stencil.js component framework, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/cjs/player-limit-notification-nd-b2592c1c.js | AI (source-diff): Minified Stencil.js CJS component bundle; readable content, not obfuscated malware. Stable pattern for this package. | ai | |
| source-diff | net-exec-file:dist/cjs/player-limit-notification-nd-b2592c1c.js | AI (source-diff): Network calls and dynamic execution are part of the Stencil.js component framework, not dropper behavior. | ai | |
| source-diff | net-exec-file:dist/cjs/player-limit-notification-nd-48f2dcdf.js | AI (source-diff): Network+exec pattern fires on normal Stencil component bundle; no actual dropper behavior in sampled code. | ai | |
| source-diff | obfuscated-file:dist/cjs/player-limit-notification-nd-48f2dcdf.js | AI (source-diff): Standard minified Stencil.js build output; long lines are bundled UI component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/player-limit-notification-nd/player-limit-notification-nd-caf2fd3c.js | AI (source-diff): Minified Stencil component bundle; long lines are expected for this build format. | ai | |
| source-diff | net-exec-file:dist/esm/player-limit-notification-nd-caf2fd3c.js | AI (source-diff): Same Stencil bundle pattern; no malicious network/exec behavior evident. | ai | |
| source-diff | net-exec-file:dist/player-limit-notification-nd/player-limit-notification-nd-caf2fd3c.js | AI (source-diff): Same Stencil bundle; no dropper/loader behavior in sampled code. | ai | |
| source-diff | obfuscated-file:dist/esm/player-limit-notification-nd-caf2fd3c.js | AI (source-diff): Standard minified Stencil.js ESM build output; not obfuscation. | ai | |
| provenance | no-provenance | AI (provenance): Published from private JFrog Artifactory; provenance attestation not expected for internal registry packages. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped @everymatrix component package; sparse metadata is consistent with auto-generated web component builds across 153 versions. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Part of @everymatrix component library; missing description is a stable pattern across this package family. | ai |
Versions (showing 34 of 134)
| Version | Deps | Published |
|---|---|---|
| 1.92.2 | 0 / 0 | |
| 1.92.1 | 0 / 0 | |
| 1.92.0 | 0 / 0 | |
| 1.91.2 | 0 / 0 | |
| 1.91.1 | 0 / 0 | |
| 1.91.0 | 0 / 0 | |
| 1.90.37 | 0 / 0 | |
| 1.90.36 | 0 / 0 | |
| 1.90.35 | 0 / 0 | |
| 1.90.34 | 0 / 0 | |
| 1.90.33 | 0 / 0 | |
| 1.90.32 | 0 / 0 | |
| 1.90.31 | 0 / 0 | |
| 1.90.30 | 0 / 0 | |
| 1.90.29 | 0 / 0 | |
| 1.88.12 | 0 / 0 | |
| 0.1.30 | 0 / 0 | |
| 0.1.28 | 0 / 0 | |
| 0.1.11 | 0 / 0 | |
| 0.1.10 | 0 / 0 | |
| 0.1.9 | 0 / 0 | |
| 0.1.8 | 0 / 0 | |
| 0.1.7 | 0 / 0 | |
| 0.1.5 | 0 / 0 | |
| 0.1.3 | 0 / 0 | |
| 0.1.2 | 0 / 0 | |
| 0.1.1 | 0 / 0 | |
| 0.1.0 | 0 / 0 | |
| 0.0.6 | 0 / 0 | |
| 0.0.5 | 0 / 0 | |
| 0.0.4 | 0 / 0 | |
| 0.0.3 | 0 / 0 | |
| 0.0.2 | 0 / 0 | |
| 0.0.1 | 0 / 0 |