@hebcal/core
18
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
mjradwin
Keywords
hebcalhebrewcalendarjewishholidayschagimsedradatedafyomizemanimzmanim
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/size-demo/dist/getHoliday.js | AI (source-diff): Rollup bundle artifact in size-demo directory; readable TS-compiled calendar logic, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/src/he.po.js | AI (source-diff): Hebrew translation dictionary; long lines are JSON-like data, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/size-demo/dist/parshiyot.js | AI (source-diff): Rollup bundle artifact in size-demo directory; same pattern as getHoliday.js. | ai | |
| source-diff | obfuscated-file:dist/size-demo/dist/sedra.js | AI (source-diff): Rollup bundle artifact in size-demo directory; same pattern as getHoliday.js. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a TypeScript runtime helper; used implicitly by compiled TS output, not directly imported. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @hebcal/core is a long-established Jewish calendar library; scoped name has no relation to the cors package. | ai |