@gapi/cli
Gapi command line interface
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:uninstall | AI (phantom-deps): Legacy dep in long-running CLI, no evidence of malicious use. | ai | |
| semgrep | semgrep:child-process-spawn | AI (semgrep): Same runner pattern, dual-use and expected in a CLI generator. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): Used in CLI runner to shell out to build tools, expected for this package. | ai | |
| phantom-deps | phantom-dep:@angular-devkit/schematics | AI (phantom-deps): Official Angular tooling dep, expected for scaffolding CLI. | ai | |
| phantom-deps | phantom-dep:parcel-plugin-shebang | AI (phantom-deps): Parcel bundler plugin, consistent with build scripts. | ai | |
| phantom-deps | phantom-dep:@angular-devkit/core | AI (phantom-deps): Official Angular tooling dep, well-known and expected. | ai | |
| phantom-deps | phantom-dep:@rxdi/schematics | AI (phantom-deps): Angular schematics ecosystem dep, expected for scaffolding CLI. | ai | |
| phantom-deps | phantom-dep:shell-quote | AI (phantom-deps): Shell utility consistent with CLI's exec functionality. | ai | |
| phantom-deps | phantom-dep:node.extend | AI (phantom-deps): Utility dep, low risk for established CLI package. | ai | |
| phantom-deps | phantom-dep:mkdirp | AI (phantom-deps): Common utility used by CLI tooling, likely bundled/dynamic usage. | ai | |
| phantom-deps | phantom-dep:@angular-devkit/schematics-cli | AI (phantom-deps): Official Angular tooling dep, expected for scaffolding CLI. | ai | |
| phantom-deps | phantom-dep:rxjs | AI (phantom-deps): Likely used in bundled dist not scanned by heuristic. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Fires in webpack bundle output, standard bundler pattern not eval-injection. | ai | |
| phantom-deps | phantom-dep:inquirer | AI (phantom-deps): Standard CLI prompt lib, likely used in bundled/minified code. | ai | |
| dependencies | unvetted-dep:pkg | AI (dependencies): pkg is a well-known Vercel/zeit packaging tool, standard for CLI binaries. | ai | |
| phantom-deps | phantom-dep:systemjs | AI (phantom-deps): Referenced in config files as expected for this CLI; stable false positive. | ai | |
| phantom-deps | phantom-dep:chokidar | AI (phantom-deps): CLI tool uses chokidar for file watching via config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:node-notifier | AI (phantom-deps): Referenced in config files for notifications; stable false positive for this CLI package. | ai | |
| phantom-deps | phantom-dep:@zeit/ncc | AI (phantom-deps): Build/bundle tool referenced in config; stable false positive for this CLI package. | ai | |
| phantom-deps | phantom-dep:pkg | AI (phantom-deps): CLI tool that bundles/packages apps; pkg referenced in config files is expected usage pattern. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): @gapi/cli is a scoped GraphQL CLI tool with 743 versions; edit-distance match to 'joi' is a false positive. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Dynamic require loads a user-supplied external options file (program.externalOptions); intentional CLI extension point, not arbitrary code injection. | ai | |
| phantom-deps | phantom-dep:@gapi/schematics | AI (phantom-deps): Same org scope; schematics used as a CLI sub-tool, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:graphql-document-collector | AI (phantom-deps): GraphQL tooling referenced in config files; stable false positive for this CLI package. | ai | |
| phantom-deps | phantom-dep:apollo-codegen | AI (phantom-deps): GraphQL codegen tool invoked via CLI config; not directly imported but legitimately used. | ai |
Versions (showing 100 of 264)
| Version | Deps | Published |
|---|---|---|
| 1.4.71 | 15 / 4 | |
| 1.4.70 | 15 / 4 | |
| 1.4.69 | 15 / 4 | |
| 1.4.68 | 15 / 4 | |
| 1.4.67 | 15 / 4 | |
| 1.4.66 | 15 / 4 | |
| 1.4.65 | 15 / 4 | |
| 1.4.64 | 15 / 4 | |
| 1.4.63 | 15 / 4 | |
| 1.4.62 | 15 / 4 | |
| 1.4.61 | 15 / 4 | |
| 1.4.60 | 15 / 4 | |
| 1.4.59 | 15 / 4 | |
| 1.4.58 | 15 / 4 | |
| 1.4.57 | 15 / 4 | |
| 1.4.56 | 15 / 4 | |
| 1.4.55 | 15 / 4 | |
| 1.4.54 | 15 / 4 | |
| 1.4.53 | 15 / 4 | |
| 1.4.52 | 15 / 4 | |
| 1.4.51 | 15 / 4 | |
| 1.4.50 | 15 / 4 | |
| 1.4.49 | 15 / 4 | |
| 1.4.48 | 15 / 4 | |
| 1.4.47 | 15 / 4 | |
| 1.4.46 | 15 / 4 | |
| 1.4.45 | 15 / 4 | |
| 1.4.44 | 15 / 4 | |
| 1.4.43 | 15 / 4 | |
| 1.4.41 | 15 / 4 | |
| 1.4.40 | 15 / 4 | |
| 1.4.39 | 15 / 4 | |
| 1.4.38 | 15 / 4 | |
| 1.4.33 | 15 / 4 | |
| 1.4.32 | 15 / 4 | |
| 1.4.31 | 15 / 4 | |
| 1.4.30 | 15 / 4 | |
| 1.4.29 | 15 / 4 | |
| 1.4.28 | 15 / 4 | |
| 1.4.27 | 15 / 4 | |
| 1.4.26 | 15 / 4 | |
| 1.4.25 | 15 / 4 | |
| 1.4.24 | 15 / 4 | |
| 1.4.23 | 15 / 4 | |
| 1.4.22 | 15 / 4 | |
| 1.4.21 | 15 / 4 | |
| 1.4.20 | 15 / 4 | |
| 1.4.19 | 15 / 4 | |
| 1.4.18 | 15 / 4 | |
| 1.4.17 | 15 / 4 | |
| 1.4.16 | 15 / 4 | |
| 1.4.15 | 15 / 4 | |
| 1.4.14 | 15 / 4 | |
| 1.4.13 | 15 / 4 | |
| 1.4.12 | 15 / 4 | |
| 1.4.11 | 15 / 4 | |
| 1.4.10 | 15 / 4 | |
| 1.4.9 | 15 / 4 | |
| 1.4.8 | 15 / 4 | |
| 1.4.7 | 15 / 4 | |
| 1.4.6 | 15 / 4 | |
| 1.4.5 | 15 / 4 | |
| 1.4.4 | 15 / 4 | |
| 1.4.3 | 15 / 4 | |
| 1.4.2 | 15 / 4 | |
| 1.4.1 | 15 / 4 | |
| 1.4.0 | 15 / 4 | |
| 1.3.3 | 15 / 4 | |
| 1.3.2 | 15 / 4 | |
| 1.3.1 | 15 / 4 | |
| 1.3.0 | 15 / 4 | |
| 1.2.58 | 15 / 4 | |
| 1.2.57 | 15 / 4 | |
| 1.2.56 | 15 / 4 | |
| 1.2.55 | 15 / 4 | |
| 1.2.54 | 15 / 4 | |
| 1.2.53 | 15 / 4 | |
| 1.2.52 | 15 / 4 | |
| 1.2.51 | 15 / 4 | |
| 1.2.50 | 15 / 4 | |
| 1.2.49 | 15 / 4 | |
| 1.2.48 | 15 / 4 | |
| 1.2.47 | 15 / 4 | |
| 1.2.45 | 15 / 4 | |
| 1.2.44 | 15 / 4 | |
| 1.2.43 | 15 / 4 | |
| 1.2.42 | 15 / 4 | |
| 1.2.41 | 15 / 4 | |
| 1.2.40 | 15 / 4 | |
| 1.2.39 | 15 / 4 | |
| 1.2.38 | 15 / 4 | |
| 1.2.37 | 15 / 4 | |
| 1.2.36 | 15 / 4 | |
| 1.2.35 | 15 / 4 | |
| 1.2.34 | 15 / 4 | |
| 1.2.33 | 15 / 4 | |
| 1.2.32 | 15 / 4 | |
| 1.2.31 | 15 / 4 | |
| 1.2.30 | 15 / 4 | |
| 1.2.29 | 15 / 4 |
v1.4.71
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.70
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.69
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.68
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.67
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.66
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.65
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.64
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.63
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.62
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.61
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.60
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.59
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.58
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.57
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.56
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.55
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.54
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.53
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.52
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.51
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.50
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.49
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.48
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.47
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.46
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.45
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.44
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.43
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.41
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.40
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.39
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.38
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.33
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.32
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.31
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.30
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.29
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.28
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.27
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.26
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.25
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.24
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.23
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.22
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.21
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.20
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.19
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.18
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.15
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.13
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.12
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.10
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.8
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.7
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.5
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.4
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.3
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.1
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.58
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.57
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.56
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.55
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.54
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.53
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.52
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.51
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.50
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.49
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.48
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.47
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.45
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.44
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.43
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.42
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.41
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.40
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.39
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.38
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.37
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.36
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.35
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.34
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.33
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.32
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.31
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.30
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.29
4 findingsnew Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
new Function() dynamically compiles and executes code, similar to eval(). Common in template engines and parsers — verify the input source. > 1 | webpackJsonp([0],{"+3/4":function(t,e,n){"use strict";n.d(e,"a",function(){return i});var r=n("TToO"),i=function(t){func
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.