@hot-updater/console
React Native OTA solution for self-hosted
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
gronxb
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/assets/index-BFsYBw_S.js | AI (source-diff): Vite-bundled SolidJS frontend asset; minification is expected for this console/dashboard package. | ai | |
| source-diff | obfuscated-file:dist/assets/index-lDBYQmsv.js | AI (source-diff): Vite-bundled SolidJS frontend asset; minification is expected for this UI console package. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): solid-icons is a legitimate icon library; addition is consistent with UI console functionality. | ai | |
| source-diff | obfuscated-file:dist/assets/index-B7wIrWdR.js | AI (source-diff): Vite-bundled SPA output; minified hashed asset files are expected for this UI console package. | ai | |
| provenance | publisher-changed | AI (provenance): Package now published via GitHub Actions CI with SLSA attestation; this is the documented automation pattern for the hot-updater monorepo. | ai | |
| source-diff | obfuscated-file:dist/assets/index-ijmIcyn1.js | AI (source-diff): Minified Vite/SolidJS bundle for a console UI; long lines are expected build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/assets/index-BTYk3GnI.js | AI (source-diff): Vite-bundled SPA output; minified JS is expected for this UI console package. | ai | |
| source-diff | obfuscated-file:dist/assets/index-ClfoMSQp.js | AI (source-diff): Standard Vite-bundled SPA output; minification is expected for this UI console package. | ai | |
| source-diff | obfuscated-file:dist/assets/index-nGJHe5si.js | AI (source-diff): Standard Vite-minified SPA bundle; SolidJS reactive patterns clearly visible in sample, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:.output/public/assets/dist-B5egZOkC.js | AI (source-diff): Standard Vite-minified frontend bundle containing React internals; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:.output/public/assets/BaseTanStackRouterDevtoolsPanel-Bmws3ikM-q5p5qKUx.js | AI (source-diff): Standard Vite-minified frontend bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:.output/public/assets/clsx-CbprLf2V.js | AI (source-diff): Standard Vite-minified frontend bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:.output/public/assets/FloatingTanStackRouterDevtools-B7vy70jP-Bzs2Gthe.js | AI (source-diff): Standard Vite-minified frontend bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:.output/public/assets/main-DrVuFR7r.js | AI (source-diff): Standard Vite-minified frontend bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:.output/public/assets/preload-helper-C5ST2IKa.js | AI (source-diff): Standard Vite-minified frontend bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:.output/public/assets/routes-C_bgs7kg.js | AI (source-diff): Standard Vite-minified frontend bundle; not obfuscated malware. | ai | |
| phantom-deps | phantom-dep:@hot-updater/bsdiff | AI (phantom-deps): Same-org monorepo dep; declared as runtime dep, used indirectly via bundled output. | ai | |
| phantom-deps | phantom-dep:@hot-updater/server | AI (phantom-deps): Same-org monorepo dep; declared as runtime dep, used indirectly via bundled output. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established package in a monorepo; sparse README is expected for internal tooling packages. | ai | |
| dependencies | unvetted-dep:@hot-updater/cli-tools | AI (dependencies): Same-org monorepo sibling; versioned in lockstep with this package. | ai | |
| dependencies | unvetted-dep:solid-icons | AI (dependencies): Legitimate SolidJS icon library; consistent with this UI console package. | ai | |
| dependencies | unvetted-dep:@hot-updater/plugin-core | AI (dependencies): Same-org monorepo sibling; versioned in lockstep with this package. | ai | |
| dependencies | unvetted-dep:@hot-updater/core | AI (dependencies): Same-org monorepo sibling; versioned in lockstep with this package. | ai | |
| phantom-deps | phantom-dep:@hot-updater/plugin-core | AI (phantom-deps): Same-org sibling; phantom-dep heuristic unreliable for monorepo type-only or indirect usage. | ai | |
| phantom-deps | phantom-dep:solid-icons | AI (phantom-deps): Bundled UI asset; may be consumed indirectly via build output rather than direct import. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Used to convert a file hash for RSA-SHA256 signing; no payload hiding. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Fires in bundled frontend route asset; standard framework pattern, not obfuscation. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Inside inlined setimmediate polyfill (v1.0.5); well-known, stable pattern. | ai |
Versions (showing 51 of 165)
| Version | Deps | Published |
|---|---|---|
| 0.32.0 | 2 / 49 | |
| 0.31.4 | 2 / 49 | |
| 0.31.3 | 2 / 49 | |
| 0.31.2 | 2 / 49 | |
| 0.31.1 | 2 / 49 | |
| 0.31.0 | 2 / 49 | |
| 0.30.12 | 0 / 49 | |
| 0.30.11 | 0 / 49 | |
| 0.30.10 | 0 / 49 | |
| 0.30.9 | 0 / 49 | |
| 0.30.8 | 0 / 49 | |
| 0.30.7 | 0 / 49 | |
| 0.30.6 | 0 / 49 | |
| 0.30.5 | 0 / 49 | |
| 0.30.4 | 0 / 49 | |
| 0.30.3 | 0 / 49 | |
| 0.30.2 | 0 / 49 | |
| 0.30.1 | 0 / 49 | |
| 0.30.0 | 0 / 49 | |
| 0.29.8 | 0 / 49 | |
| 0.29.7 | 0 / 49 | |
| 0.29.6 | 0 / 49 | |
| 0.29.5 | 0 / 49 | |
| 0.29.4 | 0 / 49 | |
| 0.29.3 | 0 / 49 | |
| 0.29.2 | 0 / 49 | |
| 0.29.1 | 0 / 49 | |
| 0.29.0 | 0 / 49 | |
| 0.28.0 | 4 / 32 | |
| 0.27.1 | 4 / 32 | |
| 0.27.0 | 4 / 32 | |
| 0.26.2 | 4 / 32 | |
| 0.26.1 | 4 / 32 | |
| 0.26.0 | 4 / 32 | |
| 0.25.14 | 4 / 32 | |
| 0.25.13 | 4 / 32 | |
| 0.25.11 | 4 / 32 | |
| 0.25.10 | 4 / 32 | |
| 0.25.9 | 4 / 32 | |
| 0.25.8 | 4 / 32 | |
| 0.25.7 | 4 / 32 | |
| 0.25.6 | 4 / 32 | |
| 0.25.5 | 4 / 32 | |
| 0.25.4 | 4 / 32 | |
| 0.25.3 | 4 / 32 | |
| 0.25.2 | 4 / 32 | |
| 0.25.1 | 4 / 32 | |
| 0.25.0 | 4 / 32 | |
| 0.24.7 | 4 / 32 | |
| 0.24.6 | 4 / 32 | |
| 0.24.5 | 4 / 32 |