@igo2/core
15
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
mbarbeaupelordalexandre.caron12
Keywords
igo
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | source-size-tripled | AI (source-diff): Size increase consistent with adding ESM2022 compiled output for multiple sub-packages. | ai | |
| source-diff | obfuscated-file:esm2022/language/shared/language.service.mjs | AI (source-diff): Angular ESM2022 compiler output; long lines are Angular metadata declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/media/media.service.mjs | AI (source-diff): Angular ESM2022 compiler output; long lines are Angular metadata declarations, not obfuscation. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New ESM2022 sub-package entry points added in library restructure; expected for Angular library builds. | ai | |
| source-diff | obfuscated-file:esm2022/analytics/analytics.service.mjs | AI (source-diff): Angular ESM2022 compiler output; long lines are Angular metadata declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/config/config.service.mjs | AI (source-diff): Angular ESM2022 compiler output; long lines are Angular metadata declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/core.module.mjs | AI (source-diff): Angular ESM2022 compiler output; long lines are Angular metadata declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/request/error.interceptor.mjs | AI (source-diff): Angular ESM2022 compiler output; long lines are Angular metadata declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/language/shared/language.loader.mjs | AI (source-diff): Angular ESM2022 compiler output; long lines are Angular metadata declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/language/shared/language.provider.mjs | AI (source-diff): Angular ESM2022 compiler output; long lines are Angular metadata declarations, not obfuscation. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publishing with SLSA attestation; legitimate automation migration for this established package. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known Angular/TypeScript implicit runtime dep; stable false positive for this package. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @igo2/core is a long-established Angular library; scoped name under @igo2 org, no relation to cors package. | ai |
Versions (showing 15 of 15)
| Version | Deps | Published |
|---|---|---|
| 20.2.1 | 1 / 0 | |
| 20.2.0 | 1 / 0 | |
| 20.1.1 | 1 / 0 | |
| 20.1.0 | 1 / 0 | |
| 20.0.1 | 1 / 0 | |
| 18.1.5 | 1 / 0 | |
| 18.1.4 | 1 / 0 | |
| 18.0.7 | 1 / 0 | |
| 18.0.6 | 1 / 0 | |
| 18.0.5 | 1 / 0 | |
| 18.0.4 | 1 / 0 | |
| 18.0.3 | 1 / 0 | |
| 18.0.2 | 1 / 0 | |
| 18.0.1 | 1 / 0 | |
| 18.0.0 | 1 / 0 |
v18.0.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.