@gjsify/webgl
18
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
jumplinkschanzewlsh
Keywords
gjsWebGL
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:lib/esm/context/shader-program/introspection.js | AI (source-diff): Rolldown-minified ESM bundle; content is standard WebGL API implementation, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:lib/esm/context/texture-management/tex-image.js | AI (source-diff): Rolldown-minified ESM bundle; content is standard WebGL texImage2D logic using GdkPixbuf. | ai | |
| source-diff | obfuscated-file:lib/esm/context/shader-program/uniforms.js | AI (source-diff): Rolldown-minified ESM bundle; content is standard WebGL uniform setter logic. | ai | |
| source-diff | obfuscated-file:lib/esm/context/shader-program/shader-lifecycle.js | AI (source-diff): Rolldown-minified ESM bundle; content is standard WebGL shader lifecycle logic. | ai | |
| source-diff | obfuscated-file:lib/esm/context/shader-program/program-lifecycle.js | AI (source-diff): Rolldown-minified ESM bundle; content is standard WebGL program lifecycle logic. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publisher is a legitimate automation pattern for this established gjsify org package. | ai | |
| source-diff | obfuscated-file:lib/esm/context/state.js | AI (source-diff): Rolldown-minified ESM library bundle; content is WebGL implementation code. | ai | |
| source-diff | obfuscated-file:lib/esm/context/texture-management.js | AI (source-diff): Rolldown-minified ESM library bundle; content is WebGL implementation code. | ai | |
| source-diff | obfuscated-file:lib/esm/webgl-context-base.js | AI (source-diff): Rolldown-minified ESM library bundle; content is WebGL implementation code. | ai | |
| source-diff | obfuscated-file:lib/esm/webgl1.spec.js | AI (source-diff): Rolldown-minified ESM test bundle; content is plainly WebGL spec tests. | ai | |
| source-diff | obfuscated-file:lib/esm/webgl2-context/instanced-and-framebuffer-ops.js | AI (source-diff): Rolldown-minified ESM library bundle; content is WebGL2 implementation code. | ai | |
| source-diff | obfuscated-file:lib/esm/webgl2-context/object-lifecycle.js | AI (source-diff): Rolldown-minified ESM library bundle; content is WebGL2 implementation code. | ai | |
| source-diff | obfuscated-file:lib/esm/conformance/attribs.spec.js | AI (source-diff): Rolldown-minified ESM test bundle; content is plainly WebGL conformance tests, not malicious. | ai | |
| source-diff | obfuscated-file:lib/esm/conformance/buffers.spec.js | AI (source-diff): Rolldown-minified ESM test bundle; content is plainly WebGL conformance tests. | ai | |
| source-diff | obfuscated-file:lib/esm/conformance/context.spec.js | AI (source-diff): Rolldown-minified ESM test bundle; content is plainly WebGL conformance tests. | ai | |
| source-diff | obfuscated-file:lib/esm/conformance/programs.spec.js | AI (source-diff): Rolldown-minified ESM test bundle; content is plainly WebGL conformance tests. | ai | |
| source-diff | obfuscated-file:lib/esm/conformance/rendering.spec.js | AI (source-diff): Rolldown-minified ESM test bundle; content is plainly WebGL conformance tests. | ai | |
| source-diff | obfuscated-file:lib/esm/conformance/state.spec.js | AI (source-diff): Rolldown-minified ESM test bundle; content is plainly WebGL conformance tests. | ai | |
| source-diff | obfuscated-file:lib/esm/conformance/textures.spec.js | AI (source-diff): Rolldown-minified ESM test bundle; content is plainly WebGL conformance tests. | ai | |
| source-diff | obfuscated-file:lib/esm/conformance/uniforms.spec.js | AI (source-diff): Rolldown-minified ESM test bundle; content is plainly WebGL conformance tests. | ai | |
| source-diff | obfuscated-file:lib/esm/context/buffer-binding.js | AI (source-diff): Rolldown-minified ESM library bundle; content is WebGL implementation code. | ai | |
| source-diff | obfuscated-file:lib/esm/context/drawing.js | AI (source-diff): Rolldown-minified ESM library bundle; content is WebGL implementation code. | ai | |
| source-diff | obfuscated-file:lib/esm/context/framebuffer.js | AI (source-diff): Rolldown-minified ESM library bundle; content is WebGL implementation code. | ai | |
| source-diff | obfuscated-file:lib/esm/context/shader-program.js | AI (source-diff): Rolldown-minified ESM library bundle; content is WebGL implementation code. | ai | |
| phantom-deps | phantom-dep:glsl-tokenizer | AI (phantom-deps): Referenced in config files, not directly imported; consistent with build-time usage pattern. | ai | |
| phantom-deps | phantom-dep:bit-twiddle | AI (phantom-deps): Referenced in config files, not directly imported; consistent with build-time usage pattern. | ai | |
| phantom-deps | phantom-dep:@gjsify/event-bridge | AI (phantom-deps): Same-org package; indirect usage via gjsify toolchain is expected. | ai | |
| phantom-deps | phantom-dep:@gjsify/dom-events | AI (phantom-deps): Same-org package; indirect usage via gjsify toolchain is expected. | ai | |
| phantom-deps | phantom-dep:@gjsify/utils | AI (phantom-deps): Same-org package used indirectly via gjsify build toolchain; not a direct import by design. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): Prebuilt .so files are the documented native binding output for this GJS WebGL library; consistent across versions. | ai |