@firebase/firestore
The Cloud Firestore component of the Firebase JS SDK.
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
firebase-opsfeiyang.chengoogle-wombotchholland
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/intermediate/common-6d328180.node.mjs | AI (source-diff): Standard minified/bundled Firebase SDK intermediate distribution file with readable license headers and legitimate Firebase imports. Not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/common-48952348.node.mjs | AI (source-diff): Standard minified/bundled Firebase SDK distribution file with readable license headers and legitimate Firebase imports. Not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/common-c9b1e5be.rn.js | AI (source-diff): Standard minified/bundled Firebase SDK distribution file with readable license headers and legitimate Firebase imports. Not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/common-171055d8.rn.js | AI (source-diff): Standard Rollup bundle output for Firebase Firestore's React Native target. Long lines are minification artifacts; samples show readable Apache-licensed Firebase code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-65272360.node.mjs | AI (source-diff): Standard Rollup intermediate bundle for Firebase Firestore's Node.js target. Long lines are minification artifacts; samples show readable Apache-licensed Firebase code. | ai | |
| source-diff | obfuscated-file:dist/common-15cd2217.node.mjs | AI (source-diff): Standard Rollup bundle output for Firebase Firestore's Node.js ESM target. Long lines are minification artifacts; samples show readable Apache-licensed Firebase code with grpc imports. | ai | |
| source-diff | obfuscated-file:dist/common-e2030318.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle for Node.js. Imports from known Firebase and Node.js packages only. Minification is expected for dist files. | ai | |
| source-diff | obfuscated-file:dist/common-817f20de.rn.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and known Firebase imports. Minification is expected for production dist files in this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-5a7bb5ed.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle for Node.js. Imports from known Firebase and Node.js packages only. Minification is expected for dist files. | ai | |
| source-diff | obfuscated-file:dist/common-1de5b363.rn.js | AI (source-diff): Standard minified build artifact for Firebase Firestore React Native target; contains Apache license headers and readable Firebase SDK code. Expected output from Firebase's build tooling. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-d1d88015.node.mjs | AI (source-diff): Standard minified intermediate build artifact for Firebase Firestore Node.js target; contains Apache license headers and readable Firebase SDK code. Expected output from Firebase's build tooling. | ai | |
| source-diff | obfuscated-file:dist/common-a0d77423.node.mjs | AI (source-diff): Standard minified build artifact for Firebase Firestore Node.js ESM target; contains Apache license headers and readable Firebase SDK code. Expected output from Firebase's build tooling. | ai | |
| source-diff | obfuscated-file:dist/common-b9b3425c.node.mjs | AI (source-diff): Standard minified Firebase SDK build artifact with Apache 2.0 license headers and known Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-34fe750a.node.mjs | AI (source-diff): Standard minified Firebase SDK build artifact with Apache 2.0 license headers and known Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-9f1a53f5.rn.js | AI (source-diff): Standard minified Firebase SDK build artifact with Apache 2.0 license headers and known Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-6795e955.rn.js | AI (source-diff): Standard minified/bundled Firebase SDK output for React Native target. Contains Apache 2.0 license headers and readable code structure; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/common-32d27a52.node.mjs | AI (source-diff): Standard minified/bundled Firebase SDK output for Node.js ESM target. Contains Apache 2.0 license headers and readable code structure; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-4457d11b.node.mjs | AI (source-diff): Standard minified/bundled Firebase SDK intermediate Node.js build artifact. Contains Apache 2.0 license headers and readable code structure; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-bb179227.js | AI (source-diff): Standard minified/bundled Firebase SDK intermediate build artifact. Contains Apache 2.0 license headers and readable code structure; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-c7f5e9d4.node.mjs | AI (source-diff): Standard minified intermediate Node.js ESM bundle from Firebase SDK build pipeline. Contains Apache 2.0 license headers and readable Firebase code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-74e7608b.js | AI (source-diff): Standard minified intermediate build artifact from Firebase SDK build pipeline. Contains Apache 2.0 license headers and readable Firebase code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-15911dc1.rn.js | AI (source-diff): Standard minified/bundled React Native build artifact from Firebase SDK build pipeline. Contains Apache 2.0 license headers and readable Firebase code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-4773e326.node.mjs | AI (source-diff): Standard minified Node.js ESM bundle from Firebase SDK build pipeline. Contains Apache 2.0 license headers and readable Firebase code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-b00eac12.rn.js | AI (source-diff): Standard minified Firebase SDK bundle (React Native variant) with Apache 2.0 license headers. Long lines are from minification, not obfuscation. Normal for this package. | ai | |
| source-diff | obfuscated-file:dist/common-033bbdc9.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle (Node ESM variant) with Apache 2.0 license headers and readable class definitions. Normal build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-ef9c2759.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle (intermediate Node ESM variant) with Apache 2.0 license headers. Normal build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-6337e6ff.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable structure. Long lines are from minification, not obfuscation. Normal for this package. | ai | |
| source-diff | obfuscated-file:dist/common-84bde33b.node.mjs | AI (source-diff): Minified Node.js ESM build artifact; standard Firebase SDK build output with Apache 2.0 headers and legitimate Firebase/gRPC imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-d5ea74be.rn.js | AI (source-diff): Minified build artifact for React Native target; standard Firebase SDK build output with Apache 2.0 headers and legitimate Firebase/gRPC imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-dbfb64dd.js | AI (source-diff): Minified intermediate build artifact; standard Firebase SDK build output with Apache 2.0 headers and legitimate Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-6a73605e.node.mjs | AI (source-diff): Minified Node.js ESM build artifact; standard Firebase SDK build output with Apache 2.0 headers and legitimate Firebase/gRPC imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-8ca547ee.node.mjs | AI (source-diff): Standard minified bundle output from Firebase Firestore build process. Contains Apache 2.0 license headers and readable Firestore SDK code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-1738d37e.rn.js | AI (source-diff): Standard minified bundle output from Firebase Firestore build process. Contains Apache 2.0 license headers and readable Firestore SDK code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-22583172.js | AI (source-diff): Standard minified bundle output from Firebase Firestore build process. Contains Apache 2.0 license headers and readable Firestore SDK code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-0dd6f2e1.node.mjs | AI (source-diff): Standard minified bundle output from Firebase Firestore build process. Contains Apache 2.0 license headers and readable Firestore SDK code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-8744949e.js | AI (source-diff): Standard bundler minification output for Firebase SDK; contains Apache 2.0 license headers and readable Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-22df285a.node.mjs | AI (source-diff): Standard bundler minification output for Firebase SDK Node.js ESM build; contains Apache 2.0 license headers and readable Firebase/gRPC imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-1d119259.node.mjs | AI (source-diff): Standard bundler minification output for Firebase SDK Node.js build; contains Apache 2.0 license headers and readable Firebase/gRPC imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-aabb8ad1.rn.js | AI (source-diff): Standard bundler minification output for Firebase SDK React Native build; contains Apache 2.0 license headers and readable Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-dd47ca98.node.mjs | AI (source-diff): Standard minified Firebase SDK Node.js intermediate bundle. Long lines are build-time minification. Apache 2.0 headers and known Firebase/gRPC imports confirm legitimacy. | ai | |
| source-diff | obfuscated-file:dist/common-b5521e7f.node.mjs | AI (source-diff): Standard minified Firebase SDK Node.js ESM bundle. Long lines are build-time minification. Apache 2.0 headers and known Firebase/gRPC imports confirm legitimacy. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-8631fbf9.js | AI (source-diff): Standard minified Firebase SDK intermediate bundle. Long lines are build-time minification. Apache 2.0 headers and Firebase imports confirm legitimacy. | ai | |
| source-diff | obfuscated-file:dist/common-85af5645.rn.js | AI (source-diff): Standard minified Firebase SDK bundle for React Native. Long lines are build-time minification, not obfuscation. Apache 2.0 headers and Firebase imports confirm legitimacy. | ai | |
| source-diff | obfuscated-file:dist/common-eb0cd80f.rn.js | AI (source-diff): React Native bundle variant of Firebase Firestore SDK. Minified output is expected; samples show legitimate Firebase SDK code with proper license headers. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-d724f2d9.node.mjs | AI (source-diff): Intermediate Node.js ESM bundle of Firebase Firestore SDK. Minified output is expected; samples show legitimate Firebase SDK code with proper license headers. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-ba74b0bf.js | AI (source-diff): Standard Rollup bundle output with Apache 2.0 license headers and readable Firebase SDK code. Minification with short variable names is expected for @firebase/firestore dist files. | ai | |
| source-diff | obfuscated-file:dist/common-2f2883db.node.mjs | AI (source-diff): Node.js ESM bundle of Firebase Firestore SDK. Minified output is expected; samples show legitimate Firebase SDK code with proper license headers and known dependency imports. | ai | |
| source-diff | obfuscated-file:dist/common-840f515b.node.mjs | AI (source-diff): Standard minified bundler output for Firebase Firestore Node.js ESM dist files; contains Apache 2.0 license headers and readable Firebase SDK code. Not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-6eea97a8.rn.js | AI (source-diff): Standard minified bundler output for Firebase Firestore React Native dist files; contains Apache 2.0 license headers and readable Firebase SDK code. Not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-3f0925b9.js | AI (source-diff): Standard minified bundler output for Firebase Firestore dist files; contains Apache 2.0 license headers and readable Firebase SDK code. Not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-f58a3d2a.node.mjs | AI (source-diff): Standard minified bundler output for Firebase Firestore Node.js intermediate dist files; contains Apache 2.0 license headers and readable Firebase SDK code. Not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-c3bf8ff8.node.mjs | AI (source-diff): Standard minified bundle output from Firebase's build pipeline. Contains Apache 2.0 license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-91c02f1c.rn.js | AI (source-diff): Standard minified bundle output from Firebase's build pipeline. Contains Apache 2.0 license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-c66baa80.js | AI (source-diff): Standard minified bundle output from Firebase's build pipeline. Contains Apache 2.0 license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-9ac942c5.node.mjs | AI (source-diff): Standard minified bundle output from Firebase's build pipeline. Contains Apache 2.0 license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-16237fe9.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle artifact with Apache 2.0 license headers and readable Firebase/gRPC imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-2250b9a1.rn.js | AI (source-diff): Standard minified Firebase SDK bundle artifact with Apache 2.0 license headers and readable Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-e26b6c90.js | AI (source-diff): Standard minified Firebase SDK bundle artifact with Apache 2.0 license headers and readable Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-6c5b7170.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle artifact with Apache 2.0 license headers and readable Firebase/gRPC imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-c3808afe.node.mjs | AI (source-diff): Standard minified/bundled Firestore SDK artifact with Apache 2.0 license headers and readable Firebase imports. Not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/common-499e1a09.rn.js | AI (source-diff): Standard minified/bundled Firestore SDK artifact with Apache 2.0 license headers and readable Firebase imports. Not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-8f065b64.js | AI (source-diff): Standard minified/bundled Firestore SDK artifact with Apache 2.0 license headers and readable Firebase imports. Not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-e3d03cfa.node.mjs | AI (source-diff): Standard minified/bundled Firestore SDK artifact with Apache 2.0 license headers and readable Firebase imports. Not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-fd749f39.node.mjs | AI (source-diff): Standard Firebase SDK minified build artifact for Node.js ESM; long lines are from minification, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-8c7a4449.node.mjs | AI (source-diff): Standard Firebase SDK minified build artifact for Node.js ESM; long lines are from minification, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-5ae63995.rn.js | AI (source-diff): Standard Firebase SDK minified build artifact for React Native; long lines are from minification, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-3dbc8a89.js | AI (source-diff): Standard Firebase SDK minified build artifact with Apache 2.0 license headers and readable structure; long lines are from minification, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-6623c159.rn.js | AI (source-diff): Standard minified build artifact for Firebase SDK React Native bundle; Apache 2.0 license headers and readable structure confirm legitimate origin. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-f72b58ad.js | AI (source-diff): Standard minified intermediate build artifact for Firebase SDK; imports from known Firebase packages confirm legitimate origin. | ai | |
| source-diff | obfuscated-file:dist/common-a1f0eeac.node.mjs | AI (source-diff): Standard minified Node.js ESM bundle for Firebase Firestore; Apache 2.0 license and known Firebase/gRPC imports confirm legitimate origin. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-8198cb10.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact for Firebase SDK; readable class definitions and known imports confirm legitimate origin. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-a90e8a69.js | AI (source-diff): Standard minified Firebase SDK bundle; single-letter variable names are bundler output, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-1faa820e.node.mjs | AI (source-diff): Standard minified Firebase SDK Node.js bundle with proper license headers and readable class definitions. | ai | |
| source-diff | obfuscated-file:dist/common-63de4682.node.mjs | AI (source-diff): Standard minified Firebase SDK Node.js ESM bundle; content is consistent with normal Firebase build output. | ai | |
| source-diff | obfuscated-file:dist/common-881aec0f.rn.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable structure; long lines are from bundler minification, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-4bb5a9c2.js | AI (source-diff): Standard minified build artifact from Firebase's bundler (Rollup/esbuild). Contains Apache 2.0 license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-ee082a02.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact. Contains proper license headers and Firebase SDK imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-d901ba1a.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact. Contains proper license headers and Firebase SDK imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-c2b9119b.rn.js | AI (source-diff): Standard minified React Native build artifact. Contains proper license headers and Firebase SDK imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-5595ce30.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable imports from known Firebase packages. Not obfuscation — normal build artifact. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-86aeeaa5.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable imports from known Firebase packages. Not obfuscation — normal build artifact. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-f23e73ef.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable imports from known Firebase packages. Not obfuscation — normal build artifact. | ai | |
| source-diff | obfuscated-file:dist/common-0089c808.rn.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable imports from known Firebase packages. Not obfuscation — normal build artifact. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-4e5da42b.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license header and known Firebase/Google imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-fd4204db.rn.js | AI (source-diff): Standard minified React Native Firebase SDK bundle with Apache 2.0 license header and known Firebase/Google imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-7ded7c03.node.mjs | AI (source-diff): Standard minified Node.js Firebase SDK bundle with Apache 2.0 license header and known Firebase/Google imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-7ed25b17.node.mjs | AI (source-diff): Standard minified Node.js Firebase SDK intermediate bundle with Apache 2.0 license header and known Firebase/Google imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-d74252d7.node.mjs | AI (source-diff): Intermediate Node.js ESM bundle for Firebase Firestore build pipeline; minification is standard for this SDK's build system. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-b1b5202d.js | AI (source-diff): Standard Rollup bundle output for Firebase Firestore SDK; minified variable names are a build artifact, not obfuscation. Content is readable Firebase SDK code with Apache 2.0 headers. | ai | |
| source-diff | obfuscated-file:dist/common-fcf01fae.rn.js | AI (source-diff): React Native distribution bundle for Firebase Firestore; minification is expected build output, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-2d02c511.node.mjs | AI (source-diff): Node.js ESM distribution bundle for Firebase Firestore; long lines are minified SDK code with proper license headers and known Firebase imports. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-189b49bb.node.mjs | AI (source-diff): Standard minified intermediate Node.js ESM build artifact for Firebase Firestore; contains Apache 2.0 license headers and imports from known Firebase/gRPC packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-0a1583b5.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact for Firebase Firestore; contains Apache 2.0 license headers and imports from known Firebase/gRPC packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-e0ad3b65.rn.js | AI (source-diff): Standard minified React Native build artifact for Firebase Firestore; contains Apache 2.0 license headers and imports from known Firebase packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-cc1a5bce.js | AI (source-diff): Standard minified build artifact for Firebase Firestore; contains Apache 2.0 license headers and imports from known Firebase/Google packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-7e678d41.js | AI (source-diff): Standard minified intermediate build artifact for Firebase Firestore SDK. Minification is expected; no malicious patterns present. | ai | |
| source-diff | obfuscated-file:dist/common-10e9c6e4.rn.js | AI (source-diff): Standard minified Firebase SDK bundle for React Native. Contains Apache 2.0 license headers and readable Firebase SDK code; minification is expected build output for this package. | ai | |
| source-diff | obfuscated-file:dist/common-d23d98db.node.mjs | AI (source-diff): Standard minified Node.js ESM bundle for Firebase Firestore SDK. Minification is expected build output; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-35e61a35.node.mjs | AI (source-diff): Standard minified Node.js ESM bundle for Firebase Firestore SDK. Contains expected Firebase/gRPC imports and Apache 2.0 license headers. | ai | |
| source-diff | obfuscated-file:dist/common-760691c5.rn.js | AI (source-diff): Standard minified React Native build artifact from Firebase SDK bundling pipeline. Contains Apache 2.0 license headers and readable Firebase SDK code. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-1235648f.js | AI (source-diff): Standard minified build artifact from Firebase SDK bundling pipeline. Contains Apache 2.0 license headers and readable Firebase SDK code. Expected for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-79fee868.node.mjs | AI (source-diff): Standard minified Node.js intermediate build artifact from Firebase SDK bundling pipeline. Contains Apache 2.0 license headers and readable Firebase SDK code. | ai | |
| source-diff | obfuscated-file:dist/common-438e87c3.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact from Firebase SDK bundling pipeline. Contains Apache 2.0 license headers and readable Firebase SDK code. | ai | |
| publish-pattern | suspicious-version-number | AI (publish-pattern): Firebase EAP pre-release versions use this naming convention (eap-feature-name.N.commithash); published by Google's official release bot google-wombot. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-4f5aa7e8.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact from Firebase SDK bundler; contains Apache 2.0 license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-e746e01c.js | AI (source-diff): Standard minified build artifact from Firebase SDK bundler pipeline; contains Apache 2.0 license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-7d406e54.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact from Firebase SDK bundler; contains Apache 2.0 license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-fbe26467.rn.js | AI (source-diff): Standard minified React Native build artifact from Firebase SDK bundler; contains Apache 2.0 license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-8dae3c34.js | AI (source-diff): Standard minified build artifact for Firebase Firestore SDK with Apache 2.0 license headers and legitimate Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-923b27cc.rn.js | AI (source-diff): Standard minified React Native build artifact for Firebase Firestore SDK. Contains proper license headers and legitimate Firebase imports. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-0ebc5163.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact for Firebase Firestore SDK. Contains proper license headers and legitimate Firebase/gRPC imports. | ai | |
| source-diff | obfuscated-file:dist/common-790ba57f.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact for Firebase Firestore SDK. Contains proper license headers and legitimate Firebase/gRPC imports. | ai | |
| source-diff | obfuscated-file:dist/common-db284300.rn.js | AI (source-diff): Standard minified Firebase SDK bundle for React Native. Contains Apache 2.0 license headers and imports from known Firebase packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-ae5a3aac.node.mjs | AI (source-diff): Standard minified Firebase SDK Node.js ESM bundle. Contains Apache 2.0 license headers and imports from known Firebase/Node packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-32974708.node.mjs | AI (source-diff): Standard minified Firebase SDK Node.js ESM bundle. Contains Apache 2.0 license headers and imports from known Firebase/Node packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-f63e7ba6.js | AI (source-diff): Standard minified Firebase SDK intermediate build artifact. Contains Apache 2.0 license headers and imports from known Firebase packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-88f176bb.js | AI (source-diff): Standard minified Firebase SDK bundle output with Apache 2.0 license headers and known Firebase imports. Long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-fdbe760f.node.mjs | AI (source-diff): Standard Firebase SDK Node.js ESM bundle with Apache 2.0 license and known Firebase/gRPC imports. Long lines from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-2642590d.node.mjs | AI (source-diff): Standard Firebase SDK Node.js ESM bundle with Apache 2.0 license and known Firebase/gRPC imports. Long lines from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-ef1632c2.rn.js | AI (source-diff): Standard minified Firebase SDK bundle for React Native. Contains Apache 2.0 license and known Firebase package imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-5d632f6a.rn.js | AI (source-diff): Standard minified build artifact for Firebase Firestore's React Native bundle. Contains Apache 2.0 license headers and readable Firebase SDK code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-ba36518c.js | AI (source-diff): Standard minified intermediate build artifact for Firebase Firestore. Contains Apache 2.0 license headers and readable Firebase SDK code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-0dd5d6dc.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact for Firebase Firestore. Contains Apache 2.0 license headers and readable Firebase SDK code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-97615e61.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact for Firebase Firestore. Contains Apache 2.0 license headers and readable Firebase SDK code; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-e342d4f0.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact for Firebase Firestore SDK. Contains Apache 2.0 license headers and readable Firebase/gRPC imports; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-f4870ef2.rn.js | AI (source-diff): Standard minified React Native build artifact for Firebase Firestore SDK. Contains Apache 2.0 license headers and readable Firebase imports; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-7cba0ec6.js | AI (source-diff): Standard minified build artifact for Firebase Firestore SDK. Contains Apache 2.0 license headers and readable Firebase imports; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-86889193.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact for Firebase Firestore SDK. Contains Apache 2.0 license headers and readable Firebase/gRPC imports; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-25aab91e.node.mjs | AI (source-diff): Standard Rollup minified bundle output for Firebase SDK Node.js ESM target; contains Apache 2.0 license headers and legitimate Firebase/gRPC imports. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-425fbd9a.node.mjs | AI (source-diff): Standard Rollup minified bundle output for Firebase SDK Node.js intermediate target; contains Apache 2.0 license headers and legitimate Firebase/gRPC imports. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-2b06dda1.js | AI (source-diff): Standard Rollup minified bundle output for Firebase SDK; contains Apache 2.0 license headers and legitimate Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-be4641aa.rn.js | AI (source-diff): Standard Rollup minified bundle output for Firebase SDK React Native target; contains Apache 2.0 license headers and legitimate Firebase imports. | ai | |
| source-diff | obfuscated-file:dist/common-b63670f6.node.mjs | AI (source-diff): Standard minified/bundled Firestore SDK output with Apache license headers and readable Firebase imports. Not obfuscated — expected build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-dde41407.node.mjs | AI (source-diff): Standard minified/bundled Firestore SDK output with Apache license headers and readable Firebase imports. Not obfuscated — expected build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-e741e357.js | AI (source-diff): Standard minified/bundled Firestore SDK output with Apache license headers and readable Firebase imports. Not obfuscated — expected build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/common-62590805.rn.js | AI (source-diff): Standard minified/bundled Firestore SDK output with Apache license headers and readable Firebase imports. Not obfuscated — expected build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/common-0c3d9d2b.rn.js | AI (source-diff): Firebase SDK ships minified/bundled dist files as standard build output. Long lines are from bundling, not obfuscation. Apache 2.0 headers and readable Firebase imports confirm legitimacy. | ai | |
| source-diff | obfuscated-file:dist/common-28d7bd35.node.mjs | AI (source-diff): Firebase SDK ships minified/bundled dist files as standard build output. Long lines are from bundling, not obfuscation. Apache 2.0 headers and readable Firebase imports confirm legitimacy. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-dda7358d.node.mjs | AI (source-diff): Firebase SDK ships minified/bundled dist files as standard build output. Long lines are from bundling, not obfuscation. Apache 2.0 headers and readable Firebase imports confirm legitimacy. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-779c83e2.js | AI (source-diff): Firebase SDK ships minified/bundled dist files as standard build output. Long lines are from bundling, not obfuscation. Apache 2.0 headers and readable Firebase imports confirm legitimacy. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-99faa737.js | AI (source-diff): Standard minified intermediate build artifact; contains Apache 2.0 license headers and readable Firebase SDK code. Expected output from Firebase's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-9fdf0286.node.mjs | AI (source-diff): Standard minified intermediate Node.js ESM build artifact; contains Apache 2.0 license headers and readable Firebase SDK code. Expected output from Firebase's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/common-5d2381c2.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact; contains Apache 2.0 license headers and readable Firebase SDK code. Expected output from Firebase's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/common-7fa8ddb0.rn.js | AI (source-diff): Standard minified build artifact for React Native target; contains Apache 2.0 license headers and readable Firebase SDK code. Expected output from Firebase's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-80f9f4ac.node.mjs | AI (source-diff): Standard Rollup bundle output for Node.js ESM target. Contains Apache 2.0 headers and readable structure. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-a0314e5b.node.mjs | AI (source-diff): Standard Rollup bundle output for Node.js ESM target. Contains Apache 2.0 headers and readable structure. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-7fa49624.rn.js | AI (source-diff): Standard Rollup bundle output for React Native target. Contains Apache 2.0 headers and readable structure. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-26a4714a.js | AI (source-diff): Standard Rollup bundle output with minified variable names for Firebase SDK. Contains Apache 2.0 headers and readable structure. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-0ca79875.rn.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable Firebase imports. Not obfuscation — normal build output for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-7e5c85bf.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable Firebase imports. Not obfuscation — normal build output for this package. | ai | |
| source-diff | obfuscated-file:dist/common-6decbb44.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable Firebase imports. Not obfuscation — normal build output for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-9a1d80b4.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and readable Firebase imports. Not obfuscation — normal build output for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-aa0b03b7.js | AI (source-diff): Standard minified Firebase SDK bundle output with Apache 2.0 license headers; single-char variable names are from minification, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/common-1ff32a18.rn.js | AI (source-diff): Standard minified Firebase SDK bundle output with Apache 2.0 license headers; single-char variable names are from minification, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-e43df396.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle output with Apache 2.0 license headers; single-char variable names are from minification, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/common-cf89e5b3.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle output with Apache 2.0 license headers; single-char variable names are from minification, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-53813000.js | AI (source-diff): Standard minified Firebase SDK build artifact with Apache 2.0 license headers and readable structure; long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-ce42cb9e.node.mjs | AI (source-diff): Standard minified Firebase SDK intermediate Node.js ESM build artifact; long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-944748bc.node.mjs | AI (source-diff): Standard minified Firebase SDK Node.js ESM build artifact; long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-b91bd8b0.rn.js | AI (source-diff): Standard minified Firebase SDK React Native build artifact; long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-d0eaac97.node.mjs | AI (source-diff): Bundled/minified Firebase Firestore build artifact with Apache 2.0 license headers and readable Firebase SDK code. Long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-791ea7bd.rn.js | AI (source-diff): Bundled/minified Firebase Firestore build artifact with Apache 2.0 license headers and readable Firebase SDK code. Long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-828f7d16.js | AI (source-diff): Bundled/minified Firebase Firestore build artifact with Apache 2.0 license headers and readable Firebase SDK code. Long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-0c6b7778.node.mjs | AI (source-diff): Bundled/minified Firebase Firestore build artifact with Apache 2.0 license headers and readable Firebase SDK code. Long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-f03e9a71.node.mjs | AI (source-diff): Standard minified intermediate build artifact for Firebase Firestore Node.js target; contains Apache license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-40d2ef2e.rn.js | AI (source-diff): Standard minified build artifact for Firebase Firestore React Native target; contains Apache license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-3a7e1d5a.node.mjs | AI (source-diff): Standard minified build artifact for Firebase Firestore Node.js ESM target; contains Apache license headers and readable Firebase SDK code. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-d26bee82.rn.js | AI (source-diff): Standard minified Firebase SDK bundle output with readable license headers and class definitions; long lines are from bundler output, not obfuscation. Stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-e6e2efba.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle output with readable license headers and class definitions; long lines are from bundler output, not obfuscation. Stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/common-34b63ba0.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle output with readable license headers and class definitions; long lines are from bundler output, not obfuscation. Stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/common-dba98a37.rn.js | AI (source-diff): Firebase Firestore ships minified bundle artifacts as standard build output. Long lines are from bundling/minification, not obfuscation. Samples show legitimate Firebase SDK code with Apache 2.0 headers. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-cc44fd27.node.mjs | AI (source-diff): Firebase Firestore ships minified bundle artifacts as standard build output. Long lines are from bundling/minification, not obfuscation. Samples show legitimate Firebase SDK code with Apache 2.0 headers. | ai | |
| source-diff | obfuscated-file:dist/common-68bd5a7c.node.mjs | AI (source-diff): Firebase Firestore ships minified bundle artifacts as standard build output. Long lines are from bundling/minification, not obfuscation. Samples show legitimate Firebase SDK code with Apache 2.0 headers. | ai | |
| source-diff | obfuscated-file:dist/common-335fa210.rn.js | AI (source-diff): Standard Firebase SDK minified build artifact with Apache 2.0 license headers; imports only from known Firebase/Google packages. | ai | |
| source-diff | obfuscated-file:dist/common-402a3cc6.node.mjs | AI (source-diff): Standard Firebase SDK minified build artifact with Apache 2.0 license headers; imports only from known Firebase/Google packages. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-74796677.js | AI (source-diff): Standard Firebase SDK minified build artifact with Apache 2.0 license headers; imports only from known Firebase/Google packages. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-741ce4d7.node.mjs | AI (source-diff): Standard Firebase SDK minified build artifact with Apache 2.0 license headers; imports only from known Firebase/Google packages. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Google routinely rotates Firebase SDK maintainers and uses google-wombot for automated publishing. Maintainer removals are expected for this package. | ai | |
| source-diff | obfuscated-file:dist/common-ccddeb9d.node.mjs | AI (source-diff): Firebase Firestore ships minified/bundled JS as standard build output. Samples show readable Apache-licensed Firebase SDK code, not obfuscation. Stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-d7774e68.node.mjs | AI (source-diff): Firebase Firestore ships minified/bundled JS as standard build output. Samples show readable Apache-licensed Firebase SDK code, not obfuscation. Stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/common-ad87ec9b.rn.js | AI (source-diff): Firebase Firestore ships minified/bundled JS as standard build output. Samples show readable Apache-licensed Firebase SDK code, not obfuscation. Stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/common-8f8e9c52.rn.js | AI (source-diff): Standard minified Firebase SDK bundle with readable license headers and class definitions. Long lines are from bundling, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-58e53b22.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle with readable license headers and class definitions. Long lines are from bundling, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/common-aa28daf8.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle with readable license headers and class definitions. Long lines are from bundling, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-96d0b167.node.mjs | AI (source-diff): Firebase Firestore ships minified/bundled dist files as part of its standard build pipeline. Long lines are bundler output, not obfuscation. Samples show readable Apache-licensed Firebase SDK code. | ai | |
| source-diff | obfuscated-file:dist/common-614a5e3a.rn.js | AI (source-diff): Firebase Firestore ships minified/bundled dist files as part of its standard build pipeline. Long lines are bundler output, not obfuscation. Samples show readable Apache-licensed Firebase SDK code. | ai | |
| source-diff | obfuscated-file:dist/common-a297a5e6.node.mjs | AI (source-diff): Firebase Firestore ships minified/bundled dist files as part of its standard build pipeline. Long lines are bundler output, not obfuscation. Samples show readable Apache-licensed Firebase SDK code. | ai | |
| source-diff | obfuscated-file:dist/common-959ea0ca.rn.js | AI (source-diff): Standard minified bundle output for React Native target. Samples show readable Firebase SDK code with Apache 2.0 headers — long lines are from bundling, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-4379d60d.node.mjs | AI (source-diff): Standard minified ESM bundle for Node.js target. Samples show readable Firebase SDK code with proper license headers and expected imports. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-b7ab8859.node.mjs | AI (source-diff): Intermediate build artifact for Node.js target. Samples show readable Firebase SDK code — long lines are from bundling, not obfuscation. | ai | |
| dependencies | unvetted-dep:node-fetch | AI (dependencies): [email protected] is a legitimate, widely-used HTTP polyfill for Node.js; expected dependency for Firebase SDK. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped monorepo package; short README and missing keywords are expected; full docs in firebase-js-sdk repo. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): undici is a well-known Node.js core team HTTP client replacing node-fetch; this is a legitimate modernization, not a supply chain risk. | ai | |
| dependencies | unvetted-dep:@firebase/util | AI (dependencies): @firebase/util is a first-party Google Firebase package; it is a standard dependency of all Firebase SDK packages and poses no risk. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New EAP feature branch (Firestore Pipelines) being published for the first time; large file count expected for a new Firebase SDK feature. | ai | |
| dependencies | unvetted-dep:undici | AI (dependencies): Undici is a standard, widely-used HTTP client; its addition as a replacement for node-fetch is a normal dependency modernization for a mature Firebase library. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-e122c13e.node.mjs | AI (source-diff): Standard minified intermediate Node.js ESM build artifact for Firebase SDK; imports only known Firebase/gRPC deps. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-63fc3a52.rn.js | AI (source-diff): Standard minified build artifact for Firebase SDK React Native target; imports only known Firebase/Google deps with Apache 2.0 license headers. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-abbd8850.node.mjs | AI (source-diff): Standard minified Node.js ESM build artifact for Firebase SDK; imports only known Firebase/gRPC deps. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-08af0b07.rn.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and legitimate Firebase/Google imports. Minification is expected for this package's dist artifacts. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-3e30743d.js | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and legitimate Firebase/Google imports. Minification is expected for this package's dist artifacts. | ai | |
| source-diff | obfuscated-file:dist/common-39667707.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and legitimate Firebase/Google imports. Minification is expected for this package's dist artifacts. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-692d301d.node.mjs | AI (source-diff): Standard minified Firebase SDK bundle with Apache 2.0 license headers and legitimate Firebase/Google imports. Minification is expected for this package's dist artifacts. | ai | |
| source-diff | obfuscated-file:dist/common-270e6a50.node.mjs | AI (source-diff): Minified Firebase SDK build output with Apache 2.0 license headers; standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-804201ea.js | AI (source-diff): Minified Firebase SDK build output with Apache 2.0 license headers; standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/common-60475308.rn.js | AI (source-diff): Minified Firebase SDK build output with Apache 2.0 license headers; standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-0ccd15e0.node.mjs | AI (source-diff): Minified Firebase SDK build output with Apache 2.0 license headers; standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/common-cd010f05.rn.js | AI (source-diff): Standard rollup/bundler minified output for Firebase SDK React Native build. Contains Apache 2.0 license headers and readable Firebase SDK code patterns. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit dependency for TypeScript-compiled Firebase packages; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/common-e6dbc511.node.mjs | AI (source-diff): Standard rollup/bundler minified output for Firebase SDK Node.js ESM build. Contains Apache 2.0 license headers and readable Firebase SDK code patterns. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-948f0202.node.mjs | AI (source-diff): Standard rollup/bundler minified output for Firebase SDK Node.js build. Contains Apache 2.0 license headers and readable Firebase SDK code patterns. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-abf03211.js | AI (source-diff): Standard rollup/bundler minified output for Firebase SDK. Contains Apache 2.0 license headers and readable Firebase SDK code patterns, not actual obfuscation. | ai | |
| provenance | publisher-changed | AI (provenance): google-wombot is Google's known automation publisher account; transition from firebase-ops to google-wombot is a documented Google publishing pattern. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Long dormancy followed by activity is normal for mature, stable libraries; not indicative of takeover for established Google-maintained packages. | ai | |
| source-diff | obfuscated-file:dist/common-82d44573.node.mjs | AI (source-diff): Standard minified/bundled Firebase SDK output with Apache 2.0 license headers and legitimate Firebase/grpc imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common-e4edcbc6.node.mjs | AI (source-diff): Standard minified/bundled Firebase SDK output with Apache 2.0 license headers and legitimate Firebase/grpc imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/common-66d9ea0f.rn.js | AI (source-diff): Standard minified/bundled Firebase SDK output with Apache 2.0 license headers and legitimate Firebase imports. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/intermediate/common.js | AI (source-diff): Standard minified/bundled Firebase SDK output with Apache 2.0 license headers and legitimate Firebase imports. Not malicious obfuscation. | ai | |
| provenance | no-provenance | AI (provenance): Google's Firebase team is a trusted publisher with extensive history; lack of Sigstore provenance is not a security concern for this established package. | ai |
Versions (showing 51 of 257)
| Version | Deps | Published |
|---|---|---|
| 4.14.0 | 7 / 19 | |
| 4.13.0 | 7 / 19 | |
| 4.12.0 | 7 / 19 | |
| 4.11.0 | 7 / 19 | |
| 4.10.0 | 7 / 19 | |
| 4.9.3 | 7 / 19 | |
| 4.9.2 | 7 / 19 | |
| 4.9.1 | 7 / 19 | |
| 4.9.0 | 7 / 19 | |
| 4.8.0 | 7 / 19 | |
| 4.7.17 | 7 / 19 | |
| 4.7.16 | 7 / 19 | |
| 4.7.15 | 7 / 19 | |
| 4.7.14 | 7 / 19 | |
| 4.7.13 | 7 / 19 | |
| 4.7.12 | 7 / 19 | |
| 4.7.11 | 7 / 19 | |
| 4.7.10 | 7 / 20 | |
| 4.7.9 | 7 / 20 | |
| 4.7.8 | 7 / 20 | |
| 4.7.7 | 7 / 20 | |
| 4.7.6 | 7 / 20 | |
| 4.7.5 | 7 / 20 | |
| 4.7.4 | 7 / 20 | |
| 4.7.3 | 8 / 20 | |
| 4.7.2 | 8 / 20 | |
| 4.7.1 | 8 / 20 | |
| 4.7.0 | 8 / 20 | |
| 4.6.5 | 8 / 20 | |
| 4.6.4 | 8 / 20 | |
| 4.6.3 | 8 / 20 | |
| 4.6.2 | 8 / 20 | |
| 4.6.1 | 8 / 20 | |
| 4.6.0 | 8 / 20 | |
| 4.5.1 | 8 / 20 | |
| 4.5.0 | 8 / 20 | |
| 4.4.3 | 8 / 20 | |
| 4.4.2 | 8 / 20 | |
| 4.4.1 | 8 / 20 | |
| 4.4.0 | 8 / 20 | |
| 4.3.2 | 8 / 20 | |
| 4.3.1 | 8 / 20 | |
| 4.3.0 | 8 / 20 | |
| 4.2.0 | 8 / 20 | |
| 4.1.3 | 8 / 20 | |
| 4.1.2 | 8 / 20 | |
| 4.1.1 | 8 / 20 | |
| 4.1.0 | 8 / 20 | |
| 4.0.0 | 8 / 20 | |
| 3.13.0 | 8 / 19 | |
| 3.12.2 | 8 / 19 |
v4.14.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.13.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.12.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.11.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.10.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.9.3
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.9.2
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.9.1
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.9.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.8.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.17
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.16
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.15
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.14
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.13
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.12
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.11
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.10
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.9
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.8
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.7
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.6
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.5
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.4
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.3
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.2
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.1
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.7.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.6.5
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.6.4
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.6.3
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.6.2
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.6.1
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.6.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.5.1
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.5.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.4.3
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.4.2
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.4.1
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.4.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.3.2
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.3.1
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.3.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v4.2.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.3
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.2
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.1
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.13.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.12.2
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.