@grackle-ai/web-components
Presentational React component library for the Grackle web UI
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
nickpape
Keywords
gracklecomponentsreactstorybook
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/CodePreview-DIcBJuA6.js | AI (source-diff): Standard Vite ESM bundle output; long lines are minified but readable React code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-rs-oZ_G3.js | AI (source-diff): Standard Vite ESM bundle output; hashed filename is Vite's content-hash convention, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-BBR7oqsB.js | AI (source-diff): Standard Vite minified bundle output; readable React component library code, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-VR_YpaRQ.js | AI (source-diff): Standard Vite minified bundle output; readable React/CodeMirror code, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-H8uxQrMb.js | AI (source-diff): Vite-bundled ESM output; long lines from minified CodeMirror unicode tables, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-BTbQ0Jt9.js | AI (source-diff): Vite-bundled ESM output with readable React imports; minification is expected for this build artifact. | ai | |
| source-diff | obfuscated-file:dist/index-BFEhDAIK.js | AI (source-diff): Vite-bundled ESM output; readable React component code, standard minified bundle. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-CjlT4wG3.js | AI (source-diff): Vite-bundled ESM output; long line is a CodeMirror unicode range table, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-B9M5n7_D.js | AI (source-diff): Standard Vite/Rollup minified bundle output; samples show normal React component code. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-e4jjedz2.js | AI (source-diff): Standard Vite/Rollup minified bundle output; samples show normal React component code. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-Dn9GfJA4.js | AI (source-diff): Vite-bundled ESM; long lines are Unicode range data tables, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/index-BDxzL6To.js | AI (source-diff): Vite-bundled ESM with readable React imports; long lines are data tables. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/index-BrCsHRR1.js | AI (source-diff): Standard Vite bundle output; samples show readable React/router imports, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-DyR-0bSG.js | AI (source-diff): Standard Vite bundle output; samples show readable React/CodeMirror imports, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-BhSat2G5.js | AI (source-diff): Standard Vite/Rollup minified bundle output; samples show normal React component code. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-BvssIhFL.js | AI (source-diff): Standard Vite/Rollup minified bundle output; samples show normal React component code. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-ZE6_YK_f.js | AI (source-diff): Vite-bundled ESM output; samples show legitimate React/CodeMirror code, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-Cx1iZ7F6.js | AI (source-diff): Vite-bundled ESM output; samples show legitimate React component code, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-DAaOTOOs.js | AI (source-diff): Vite build output with hashed filename; minified but not malicious — standard for this component library. | ai | |
| source-diff | obfuscated-file:dist/index-D32ymwll.js | AI (source-diff): Vite build output with hashed filename; readable React imports confirm legitimate bundled source. | ai | |
| source-diff | obfuscated-file:dist/index-Do-KBEFn.js | AI (source-diff): Standard Vite/Rollup minified bundle output; samples show normal React imports and component code. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-CM0mAqcN.js | AI (source-diff): Standard Vite/Rollup minified bundle output; samples show normal React component code, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-yDUvTVJ9.js | AI (source-diff): Standard Vite minified bundle; readable React/router imports confirm legitimate code. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-p1ps1Ext.js | AI (source-diff): Standard Vite minified bundle; readable imports confirm legitimate React/CodeMirror code. | ai | |
| source-diff | obfuscated-file:dist/index-CE9uO8-V.js | AI (source-diff): Standard Vite/Rollup minified bundle; imports are transparent React/router/grackle-ai deps. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-B_AeZa13.js | AI (source-diff): Standard Vite/Rollup minified bundle output; readable React+CodeMirror source, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:coverage/storybook/lcov-report/prettify.js | AI (source-diff): Same Google Code Prettify in storybook coverage report; not runtime code. | ai | |
| source-diff | obfuscated-file:coverage/lcov-report/prettify.js | AI (source-diff): Google Code Prettify library bundled with Istanbul HTML coverage reports; not runtime code. | ai | |
| source-diff | obfuscated-file:dist/index-CuUSiz7c.js | AI (source-diff): Standard Vite/Rollup minified bundle; readable imports confirm legitimate React component code. | ai | |
| source-diff | obfuscated-file:dist/CodePreview-Celt33oj.js | AI (source-diff): Standard Vite/Rollup minified bundle; readable imports confirm legitimate React component code. | ai | |
| phantom-deps | phantom-dep:@bufbuild/protobuf | AI (phantom-deps): Protobuf used transitively via generated code or config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@fontsource-variable/jetbrains-mono | AI (phantom-deps): Font packages imported via CSS/config, not direct JS imports; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@fontsource-variable/fira-code | AI (phantom-deps): Font packages imported via CSS/config, not direct JS imports; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@fontsource-variable/dm-sans | AI (phantom-deps): Font packages imported via CSS/config, not direct JS imports; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@codemirror/commands | AI (phantom-deps): CodeMirror deps are used transitively via the new CodePreview component; phantom-dep heuristic false positive. | ai | |
| semgrep | semgrep:ssh-key-access | AI (semgrep): Fires on a UI placeholder string in an SSH config form field; not credential access code. | ai |
Versions (showing 51 of 98)
| Version | Deps | Published |
|---|---|---|
| 0.180.0 | 32 / 31 | |
| 0.179.0 | 32 / 31 | |
| 0.178.0 | 32 / 31 | |
| 0.177.0 | 32 / 31 | |
| 0.176.0 | 32 / 31 | |
| 0.175.0 | 32 / 31 | |
| 0.174.0 | 32 / 31 | |
| 0.173.0 | 32 / 31 | |
| 0.172.0 | 32 / 31 | |
| 0.171.0 | 32 / 31 | |
| 0.170.0 | 32 / 31 | |
| 0.168.0 | 32 / 31 | |
| 0.167.0 | 32 / 31 | |
| 0.166.0 | 32 / 29 | |
| 0.165.0 | 32 / 29 | |
| 0.164.0 | 32 / 29 | |
| 0.163.0 | 32 / 29 | |
| 0.162.0 | 32 / 29 | |
| 0.161.0 | 33 / 29 | |
| 0.160.0 | 33 / 29 | |
| 0.159.0 | 32 / 29 | |
| 0.158.0 | 32 / 29 | |
| 0.157.0 | 32 / 29 | |
| 0.156.0 | 32 / 29 | |
| 0.155.0 | 32 / 29 | |
| 0.154.0 | 32 / 29 | |
| 0.153.0 | 32 / 29 | |
| 0.152.0 | 32 / 29 | |
| 0.151.0 | 32 / 29 | |
| 0.150.0 | 32 / 29 | |
| 0.149.0 | 32 / 29 | |
| 0.148.0 | 32 / 29 | |
| 0.147.0 | 32 / 29 | |
| 0.146.0 | 32 / 29 | |
| 0.145.0 | 32 / 29 | |
| 0.144.0 | 32 / 29 | |
| 0.143.0 | 32 / 29 | |
| 0.142.0 | 32 / 29 | |
| 0.141.0 | 32 / 29 | |
| 0.140.0 | 32 / 29 | |
| 0.139.2 | 23 / 29 | |
| 0.139.1 | 23 / 29 | |
| 0.139.0 | 23 / 29 | |
| 0.138.1 | 23 / 29 | |
| 0.138.0 | 23 / 29 | |
| 0.137.1 | 23 / 29 | |
| 0.137.0 | 23 / 29 | |
| 0.136.2 | 23 / 29 | |
| 0.136.1 | 23 / 29 | |
| 0.136.0 | 23 / 28 | |
| 0.135.2 | 23 / 28 |