@finos/legend-application-pure-ide-deployment
Legend Pure IDE web application deployment
5
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
finos-adminmaoo
Keywords
legendlegend-applicationlegend-pure-idedeployment
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | net-exec-file:dist/ide/static/index.e5014f7c.js | AI (source-diff): Browser SPA bundle; network calls and dynamic code are normal for a Legend IDE web app. | ai | |
| source-diff | obfuscated-file:dist/ide/static/index.e5014f7c.js | AI (source-diff): Webpack-bundled frontend app; minified dist files are expected for this deployment package. | ai | |
| source-diff | obfuscated-file:dist/ide/static/index.5c459215.js | AI (source-diff): Webpack-minified frontend bundle; expected artifact for this deployment package. | ai | |
| source-diff | net-exec-file:dist/ide/static/index.5c459215.js | AI (source-diff): Network calls and dynamic execution are normal in a React SPA bundle; no dropper indicators in the sample. | ai | |
| source-diff | net-exec-file:dist/ide/static/index.ff37b04f.js | AI (source-diff): Network calls + dynamic module loading are expected in a bundled SPA; no dropper behavior evident in the sample. | ai | |
| source-diff | obfuscated-file:dist/ide/static/index.ff37b04f.js | AI (source-diff): Webpack-minified frontend bundle for a FINOS web app; stable pattern across all versions of this deployment package. | ai | |
| source-diff | obfuscated-file:dist/ide/static/index.e084b6fc.js | AI (source-diff): Standard webpack-minified frontend bundle for a FINOS Legend web app; not obfuscation. | ai | |
| source-diff | net-exec-file:dist/ide/static/index.e084b6fc.js | AI (source-diff): Network calls + dynamic module loading are normal in a React SPA bundle; no dropper behavior present. | ai | |
| phantom-deps | phantom-dep:@finos/legend-art | AI (phantom-deps): Same-org dep in deployment bundle; phantom-dep heuristic is a stable false positive here. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Type-only dependency; loaded by convention in TS projects. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): Deployment bundle; react declared for bundling, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@finos/legend-application | AI (phantom-deps): Same-org dep in deployment bundle; phantom-dep heuristic is a stable false positive here. | ai | |
| phantom-deps | phantom-dep:@finos/legend-application-pure-ide | AI (phantom-deps): Same-org dep in deployment bundle; phantom-dep heuristic is a stable false positive here. | ai | |
| phantom-deps | phantom-dep:@finos/legend-lego | AI (phantom-deps): Same-org dep in deployment bundle; phantom-dep heuristic is a stable false positive here. | ai |