@everymatrix/prize-engine-details
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:components/PrizeEngineChest-D8cTsJZj.js | AI (source-diff): Standard Vite/Rollup minified bundle output for a Stencil web component; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/WheelSVG-FLm1KIy2.js | AI (source-diff): Standard Vite/Rollup minified bundle output for a Stencil web component; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/WheelSVG-BQqWwZZV.js | AI (source-diff): Standard Vite/Rollup minified bundle output for a Stencil web component; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineDetails-DvREFIMp.js | AI (source-diff): Standard Vite/Rollup minified bundle output for a Stencil web component; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineDetails-DKHh89gF.js | AI (source-diff): Standard Vite/Rollup minified bundle output for a Stencil web component; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineCoin-lUXhKENF.js | AI (source-diff): Standard Vite/Rollup minified bundle output for a Stencil web component; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineCoin-CHRMhjjc.js | AI (source-diff): Standard Vite/Rollup minified bundle output for a Stencil web component; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineChest-gtM6Hgy_.js | AI (source-diff): Standard Vite/Rollup minified bundle output for a Stencil web component; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/WheelSVG-Wg1MMcfU.cjs | AI (source-diff): Minified Svelte wheel component; math/geometry logic clearly visible. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineChest-DxX6TNlX.cjs | AI (source-diff): Standard Vite/Rollup minified Svelte bundle; readable logic and i18n strings confirm legitimate build output. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineCoin-D0shjSqJ.cjs | AI (source-diff): Same minified Svelte build pattern; no malicious indicators. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineDetails-CDlceut4.cjs | AI (source-diff): Minified Svelte runtime bundle; standard build artifact. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineLuckywheel-BZS-by2p.cjs | AI (source-diff): Minified Svelte component; readable CSS and component logic visible. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineChest-C4popI-2.js | AI (source-diff): ESM variant of the same Svelte bundle; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineChest-EYZUGR-U.js | AI (source-diff): ESM variant; same pattern as other build outputs. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineCoin-B6TfN5U_.js | AI (source-diff): ESM Svelte coin component; base64 image asset and i18n strings confirm legitimacy. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineCoin-D7RMJeQv.js | AI (source-diff): Same minified Svelte build pattern. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineDetails-CsklIAbg.js | AI (source-diff): Minified Svelte runtime; standard build artifact. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineDetails-D8O-TJ37.js | AI (source-diff): Minified Svelte runtime; standard build artifact. | ai | |
| source-diff | obfuscated-file:components/WheelSVG-DLyejjSm.js | AI (source-diff): Minified Svelte wheel component; legitimate build output. | ai | |
| source-diff | obfuscated-file:components/WheelSVG-R6v1RaFO.js | AI (source-diff): Minified Svelte wheel component; legitimate build output. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped internal widget package distributed via private JFrog registry; no public repo/deps expected. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineDetails-C1XfHwQ2.js | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineDetails-rvoyqZKo.js | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/WheelSVG-B2TbRSTp.js | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/WheelSVG-DobVNgse.js | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineChest-Dls3STMs.js | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/WheelSVG-CuFHEKUv.cjs | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineLuckywheel-9rO4cGC4.cjs | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineDetails-DNRTwMWB.cjs | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineChest-ZGMSjkEu.cjs | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineCoin-B_46gLcs.cjs | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineCoin-mr1naehV.js | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineCoin-C6_szda9.js | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai | |
| source-diff | obfuscated-file:components/PrizeEngineChest-DRZJY-eu.js | AI (source-diff): Standard Rollup/Vite minified build output for @everymatrix scoped UI component package. | ai |
Versions (showing 100 of 109)
| Version | Deps | Published |
|---|---|---|
| 0.4.81 | 0 / 0 | |
| 0.4.80 | 0 / 0 | |
| 0.4.79 | 0 / 0 | |
| 0.4.78 | 0 / 0 | |
| 0.4.77 | 0 / 0 | |
| 0.4.76 | 0 / 0 | |
| 0.4.75 | 0 / 0 | |
| 0.4.74 | 0 / 0 | |
| 0.4.73 | 0 / 0 | |
| 0.4.72 | 0 / 0 | |
| 0.4.71 | 0 / 0 | |
| 0.4.70 | 0 / 0 | |
| 0.4.69 | 0 / 0 | |
| 0.4.68 | 0 / 0 | |
| 0.4.67 | 0 / 0 | |
| 0.4.66 | 0 / 0 | |
| 0.4.65 | 0 / 0 | |
| 0.4.64 | 0 / 0 | |
| 0.4.63 | 0 / 0 | |
| 0.4.62 | 0 / 0 | |
| 0.4.61 | 0 / 0 | |
| 0.4.60 | 0 / 0 | |
| 0.4.59 | 0 / 0 | |
| 0.4.58 | 0 / 0 | |
| 0.4.57 | 0 / 0 | |
| 0.4.56 | 0 / 0 | |
| 0.4.55 | 0 / 0 | |
| 0.4.54 | 0 / 0 | |
| 0.4.53 | 0 / 0 | |
| 0.4.52 | 0 / 0 | |
| 0.4.51 | 0 / 0 | |
| 0.4.50 | 0 / 0 | |
| 0.4.49 | 0 / 0 | |
| 0.4.48 | 0 / 0 | |
| 0.4.47 | 0 / 0 | |
| 0.4.46 | 0 / 0 | |
| 0.4.45 | 0 / 0 | |
| 0.4.44 | 0 / 0 | |
| 0.4.43 | 0 / 0 | |
| 0.4.42 | 0 / 0 | |
| 0.4.41 | 0 / 0 | |
| 0.4.40 | 0 / 0 | |
| 0.4.39 | 0 / 0 | |
| 0.4.38 | 0 / 0 | |
| 0.4.37 | 0 / 0 | |
| 0.4.36 | 0 / 0 | |
| 0.4.35 | 0 / 0 | |
| 0.4.34 | 0 / 0 | |
| 0.4.33 | 0 / 0 | |
| 0.4.32 | 0 / 0 | |
| 0.4.31 | 0 / 0 | |
| 0.4.30 | 0 / 0 | |
| 0.4.29 | 0 / 0 | |
| 0.4.28 | 0 / 0 | |
| 0.4.27 | 0 / 0 | |
| 0.4.26 | 0 / 0 | |
| 0.4.25 | 0 / 0 | |
| 0.4.24 | 0 / 0 | |
| 0.4.23 | 0 / 0 | |
| 0.4.22 | 0 / 0 | |
| 0.4.21 | 0 / 0 | |
| 0.4.20 | 0 / 0 | |
| 0.4.19 | 0 / 0 | |
| 0.4.18 | 0 / 0 | |
| 0.4.17 | 0 / 0 | |
| 0.4.16 | 0 / 0 | |
| 0.4.15 | 0 / 0 | |
| 0.4.9 | 0 / 0 | |
| 0.4.8 | 0 / 0 | |
| 0.4.7 | 0 / 0 | |
| 0.4.6 | 0 / 0 | |
| 0.4.5 | 0 / 0 | |
| 0.4.4 | 0 / 0 | |
| 0.4.3 | 0 / 0 | |
| 0.4.2 | 0 / 0 | |
| 0.4.1 | 0 / 0 | |
| 0.4.0 | 0 / 0 | |
| 0.3.15 | 0 / 0 | |
| 0.3.14 | 0 / 0 | |
| 0.3.13 | 0 / 0 | |
| 0.3.12 | 0 / 0 | |
| 0.3.11 | 0 / 0 | |
| 0.3.10 | 0 / 0 | |
| 0.3.9 | 0 / 0 | |
| 0.3.8 | 0 / 0 | |
| 0.3.7 | 0 / 0 | |
| 0.3.6 | 0 / 0 | |
| 0.3.5 | 0 / 0 | |
| 0.3.4 | 0 / 0 | |
| 0.3.3 | 0 / 0 | |
| 0.3.2 | 0 / 0 | |
| 0.3.1 | 0 / 0 | |
| 0.3.0 | 0 / 0 | |
| 0.2.8 | 0 / 0 | |
| 0.2.7 | 0 / 0 | |
| 0.2.6 | 0 / 0 | |
| 0.2.5 | 0 / 0 | |
| 0.2.4 | 0 / 0 | |
| 0.2.3 | 0 / 0 | |
| 0.2.2 | 0 / 0 |
v0.4.81
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.80
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.78
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.77
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.76
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.75
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.74
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.73
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.72
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.71
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.70
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.69
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.68
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.67
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.66
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.65
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.64
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.63
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.62
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.61
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.60
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.59
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.58
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.56
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.55
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.4.54
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.