@gerrit0/mini-shiki
This is a re-bundled version of [Shiki](https://shiki.style) which strips out the dependencies which aren't necessary for [TypeDoc](https://typedoc.org/)'s usage.
40
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
gerrit0
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/abap-DpGqaUwk.js | AI (source-diff): Syntax grammar files serialized as single-line JSON strings are expected in mini-shiki dist bundles; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/actionscript-3-1G2LJpL3.js | AI (source-diff): Language grammar JSON serialized as single-line string; expected pattern for shiki grammar bundles. | ai | |
| source-diff | obfuscated-file:dist/ada-k3nOf1f2.js | AI (source-diff): Language grammar JSON serialized as single-line string; expected pattern for shiki grammar bundles. | ai | |
| source-diff | obfuscated-file:dist/andromeeda-Cm29CUIt.js | AI (source-diff): Theme definition JSON serialized as single-line string; expected pattern for shiki theme bundles. | ai | |
| source-diff | obfuscated-file:dist/angular-html-CZb8z5sS.js | AI (source-diff): Language grammar JSON serialized as single-line string; expected pattern for shiki grammar bundles. | ai | |
| source-diff | obfuscated-file:dist/angular-ts-DNsftJy6.js | AI (source-diff): Language grammar JSON serialized as single-line string; expected pattern for shiki grammar bundles. | ai | |
| source-diff | net-exec-file:dist/blade-MNtB4jtG.js | AI (source-diff): Blade is a PHP template language grammar file; net+exec heuristic is a false positive on regex patterns in the grammar definition. | ai | |
| source-diff | large-new-source-files | AI (source-diff): mini-shiki bundles all shiki language grammars and themes as individual dist files; large file count is expected for this package. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase reflects bundling of shiki grammar/theme files into dist; expected for this syntax highlighting package. | ai | |
| source-diff | obfuscated-file:dist/tokyo-night-D7jrhcH9.js | AI (source-diff): Minified theme color data for Tokyo Night theme — standard bundled shiki theme format, no executable logic. | ai | |
| source-diff | obfuscated-file:dist/csharp-DCNu6UpG.js | AI (source-diff): Minified TextMate grammar JSON for C# syntax highlighting — standard bundled shiki grammar format, no executable logic. | ai | |
| source-diff | obfuscated-file:dist/latex-Bga8vK7_.js | AI (source-diff): Minified TextMate grammar JSON for LaTeX syntax highlighting — standard bundled shiki grammar format, no executable logic. | ai | |
| source-diff | obfuscated-file:dist/polar-Coc1YX5F.js | AI (source-diff): Minified TextMate grammar JSON for Polar syntax highlighting — standard bundled shiki grammar format, no executable logic. | ai | |
| source-diff | obfuscated-file:dist/razor-BCUr6QHZ.js | AI (source-diff): Minified TextMate grammar JSON for ASP.NET Razor syntax highlighting — standard bundled shiki grammar format, no executable logic. | ai | |
| source-diff | obfuscated-file:dist/nix-BfvI1t_Q.js | AI (source-diff): Long-line JSON is a serialized TextMate grammar for Nix syntax highlighting — expected build output for a syntax highlighter package, not obfuscation. | ai | |
| provenance | no-provenance | AI (provenance): Established package with 35 approved versions; lack of Sigstore provenance is a minor gap, not a security risk given the publisher's track record. | ai | |
| source-diff | obfuscated-file:dist/one-dark-pro-D2ykr_fc.js | AI (source-diff): Long-line JSON is serialized VS Code theme color data for One Dark Pro — expected build output for a syntax highlighter package, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/tokyo-night-Bm2w9Sf7.js | AI (source-diff): Long-line JSON is serialized VS Code theme color data for Tokyo Night — expected build output for a syntax highlighter package, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/codeql-CMEa4UtM.js | AI (source-diff): Long-line JSON is a serialized TextMate grammar for CodeQL syntax highlighting — expected build output for a syntax highlighter package, not obfuscation. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher changed from gerrit0 to GitHub Actions reflects adoption of CI/CD publishing for this repo. SLSA provenance attestation confirms the artifact originates from the legitimate Gerrit0/mini-shiki GitHub repo. | ai | |
| dependencies | unvetted-dep:@shikijs/vscode-textmate | AI (dependencies): @shikijs/vscode-textmate is a legitimate, well-known package from the shiki ecosystem used for TextMate grammar parsing; not a real risk for this package. | ai |
Versions (showing 40 of 40)
| Version | Deps | Published |
|---|---|---|
| 3.22.0 | 5 / 9 | |
| 3.21.0 | 5 / 9 | |
| 3.20.0 | 5 / 9 | |
| 3.19.0 | 5 / 9 | |
| 3.18.0 | 5 / 9 | |
| 3.17.1 | 5 / 9 | |
| 3.17.0 | 5 / 9 | |
| 3.15.0 | 5 / 9 | |
| 3.14.0 | 5 / 9 | |
| 3.13.1 | 5 / 9 | |
| 3.13.0 | 5 / 8 | |
| 3.12.2 | 5 / 8 | |
| 3.12.1 | 5 / 8 | |
| 3.12.0 | 5 / 8 | |
| 3.11.0 | 5 / 8 | |
| 3.9.2 | 5 / 8 | |
| 3.9.1 | 5 / 8 | |
| 3.9.0 | 5 / 8 | |
| 3.8.1 | 5 / 8 | |
| 3.8.0 | 5 / 8 | |
| 3.7.0 | 5 / 8 | |
| 3.6.0 | 5 / 8 | |
| 3.5.0 | 5 / 8 | |
| 3.4.2 | 5 / 8 | |
| 3.4.1 | 5 / 8 | |
| 3.4.0 | 5 / 8 | |
| 3.3.0 | 5 / 8 | |
| 3.2.3 | 5 / 8 | |
| 3.2.2 | 5 / 8 | |
| 3.2.1 | 3 / 8 | |
| 3.1.0 | 3 / 8 | |
| 3.0.0 | 3 / 8 | |
| 2.4.1 | 3 / 8 | |
| 2.3.1 | 3 / 8 | |
| 2.3.0 | 3 / 8 | |
| 2.2.0 | 3 / 8 | |
| 2.1.0 | 3 / 8 | |
| 2.0.3 | 3 / 8 | |
| 1.23.2 | 3 / 8 | |
| 1.23.1 | 3 / 8 |