@huntsman-cancer-institute/input
This library was generated with [Angular CLI](https://github.com/angular/angular-cli) version 12.2.0.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): No diff vs last approved version; benign metadata gap for established publisher. | ai | |
| source-diff | obfuscated-file:esm2022/select/hci-datepicker.component.mjs | AI (source-diff): Long-line heuristic on standard Angular build output; sample shows plain readable source, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm5/select/custom-combobox.component.js | AI (source-diff): Angular ngcc/AOT build output, not obfuscation. | ai | |
| source-diff | source-size-tripled | AI (source-diff): New bundle formats added for Angular library distribution, not injected payload. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Bundled Angular library output ships many generated dist files by design. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): rxjs is a well-known Angular peer dependency, already used by sibling packages. | ai | |
| source-diff | obfuscated-file:esm5/select/hci-autocomplete.component.js | AI (source-diff): Standard ng-packagr ESM5 build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2015/select/hci-autocomplete.component.js | AI (source-diff): Standard ng-packagr ESM2015 build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:src/select/custom-combobox.component.ngfactory.js | AI (source-diff): Angular AOT-generated ngfactory file; long lines are standard compiler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:src/select/custom-multi-combobox.component.ngfactory.js | AI (source-diff): Angular AOT-generated ngfactory file; long lines are standard compiler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:src/select/md-multi-select.component.ngfactory.js | AI (source-diff): Angular AOT-generated ngfactory file; long lines are standard compiler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:src/select/md-select.component.ngfactory.js | AI (source-diff): Angular AOT-generated ngfactory file; long lines are standard compiler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:src/select/select.module.ngfactory.js | AI (source-diff): Angular AOT-generated ngfactory file; long lines are standard compiler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:src/date/date.module.ngfactory.js | AI (source-diff): Angular AOT-generated ngfactory file; long lines are standard compiler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/select/hci-autocomplete.component.mjs | AI (source-diff): Angular ESM2022 compiler output; long lines are template metadata, not obfuscation. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a standard Angular/TypeScript implicit runtime dep; stable false positive for this package. | ai |
Versions (showing 51 of 106)
| Version | Deps | Published |
|---|---|---|
| 17.27.0 | 3 / 0 | |
| 17.26.0 | 3 / 0 | |
| 17.25.2 | 3 / 0 | |
| 17.25.1 | 3 / 0 | |
| 17.25.0 | 3 / 0 | |
| 17.24.1 | 3 / 0 | |
| 17.24.0 | 3 / 0 | |
| 17.23.8 | 3 / 0 | |
| 17.23.7 | 3 / 0 | |
| 17.23.6 | 3 / 0 | |
| 17.23.5 | 3 / 0 | |
| 17.23.4 | 3 / 0 | |
| 17.23.3 | 3 / 0 | |
| 17.23.2 | 3 / 0 | |
| 17.23.1 | 3 / 0 | |
| 17.23.0 | 3 / 0 | |
| 17.22.0 | 3 / 0 | |
| 17.21.1 | 2 / 0 | |
| 17.21.0 | 3 / 0 | |
| 17.20.8 | 2 / 0 | |
| 17.20.7 | 2 / 0 | |
| 17.20.6 | 2 / 0 | |
| 17.20.5 | 2 / 0 | |
| 17.20.0 | 2 / 0 | |
| 17.19.0 | 2 / 0 | |
| 17.18.4 | 2 / 0 | |
| 17.18.3 | 2 / 0 | |
| 17.18.2 | 2 / 0 | |
| 17.18.1 | 2 / 0 | |
| 17.18.0 | 2 / 0 | |
| 17.17.6 | 2 / 0 | |
| 17.17.5 | 2 / 0 | |
| 17.17.4 | 2 / 0 | |
| 17.17.3 | 2 / 0 | |
| 17.17.2 | 2 / 0 | |
| 17.17.0 | 2 / 0 | |
| 17.16.1 | 2 / 0 | |
| 17.16.0 | 2 / 0 | |
| 17.15.1 | 2 / 0 | |
| 17.15.0 | 2 / 0 | |
| 17.14.6 | 2 / 0 | |
| 17.14.5 | 2 / 0 | |
| 17.14.4 | 2 / 0 | |
| 17.14.3 | 2 / 0 | |
| 17.14.2 | 2 / 0 | |
| 17.14.1 | 2 / 0 | |
| 17.14.0 | 2 / 0 | |
| 17.13.0 | 2 / 0 | |
| 17.12.0 | 2 / 0 | |
| 17.11.7 | 2 / 0 | |
| 17.11.6 | 2 / 0 |
v17.27.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v17.26.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v17.25.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v17.25.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.