@gui-chat-plugin/present3d
3
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
snakajimaisamu
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/index-BrL881Mh.cjs | AI (source-diff): Standard Vite/Rollup minified bundle of Three.js; samples show legitimate 3D library code. | ai | |
| source-diff | obfuscated-file:dist/vue.cjs | AI (source-diff): Standard Vite/Rollup minified bundle of Vue+OrbitControls; samples show legitimate code. | ai | |
| source-diff | obfuscated-file:dist/index-BXHIfuts.js | AI (source-diff): Standard Vite/Rollup minified ESM bundle; samples show legitimate Three.js/ShapeScript code. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by bundling Three.js (large 3D library) into dist artifacts. | ai | |
| phantom-deps | phantom-dep:three-bvh-csg | AI (phantom-deps): Used transitively via three-mesh-bvh; phantom-dep heuristic fires on bundled deps. | ai | |
| phantom-deps | phantom-dep:three-mesh-bvh | AI (phantom-deps): Bundled into dist by Vite; not directly imported at source level but legitimately used. | ai |