@inploi/plugin-chatbot
13
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
alexhansonsmithdcwillberg
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/index-8b83b99d.js | AI (source-diff): Standard Vite/Rollup minified output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/chatbot-body-46d6ae0c.js | AI (source-diff): Standard Vite/Rollup minified output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-002c5e40.cjs | AI (source-diff): Standard Vite/Rollup minified output; valibot validation code, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/chatbot-body-92fd0d1f.cjs | AI (source-diff): Standard Vite/Rollup minified output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/chatbot-body-f1401333.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for this UI plugin; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-d80370e4.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; lodash + inploi SDK internals. | ai | |
| source-diff | net-exec-file:dist/index-05d5a78d.js | AI (source-diff): Same pattern as CJS counterpart; no dropper behavior. | ai | |
| source-diff | net-exec-file:dist/index-d80370e4.cjs | AI (source-diff): Network calls target inploi platform endpoints; dynamic code is Function('return this') global detection idiom from lodash. | ai | |
| source-diff | obfuscated-file:dist/index-05d5a78d.js | AI (source-diff): Standard Vite/Rollup minified ESM bundle; same pattern as CJS counterpart. | ai | |
| source-diff | obfuscated-file:dist/index-5220abff.cjs | AI (source-diff): Standard Vite/Rollup minified build output; lodash utility patterns visible in samples. | ai | |
| source-diff | obfuscated-file:dist/chatbot-body-23ad6c41.cjs | AI (source-diff): Standard Vite/Rollup minified build output; readable chatbot logic visible in samples. | ai | |
| source-diff | obfuscated-file:dist/index-94ac185f.js | AI (source-diff): Standard Vite/Rollup minified build output; readable ESM lodash patterns in samples. | ai | |
| source-diff | net-exec-file:dist/index-5220abff.cjs | AI (source-diff): Network calls are SDK API calls; dynamic code execution is Function('return this') global detection pattern, not malware. | ai | |
| source-diff | net-exec-file:dist/index-94ac185f.js | AI (source-diff): Same pattern as CJS counterpart; Function('return this') is a standard cross-env global accessor. | ai | |
| source-diff | obfuscated-file:dist/chatbot-body-0fa03ac8.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; content is readable UI logic, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/index-803e84b9.js | AI (source-diff): Same pattern as CJS counterpart; Function('return this') is a standard globalThis polyfill. | ai | |
| source-diff | obfuscated-file:dist/index-803e84b9.js | AI (source-diff): Standard Vite/Rollup minified ESM bundle; content is readable utility code. | ai | |
| source-diff | net-exec-file:dist/index-4cbee407.cjs | AI (source-diff): Network calls are SDK API calls; dynamic code execution is Function('return this') global detection pattern, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/index-4cbee407.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; content is lodash utilities and SDK imports. | ai | |
| source-diff | obfuscated-file:dist/index-0b742038.cjs | AI (source-diff): Minified Vite/Rollup build output; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/chatbot-body-6eb29db1.cjs | AI (source-diff): Minified Vite/Rollup build output; stable pattern for this package. | ai | |
| source-diff | net-exec-file:dist/index-df69f83a.js | AI (source-diff): Same pattern as CJS counterpart; legitimate SDK usage. | ai | |
| source-diff | net-exec-file:dist/index-0b742038.cjs | AI (source-diff): Network calls are inploi SDK API calls; dynamic code execution is Function('return this') global detection pattern, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/index-df69f83a.js | AI (source-diff): Minified Vite/Rollup build output; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:cdn/index.js | AI (source-diff): cdn/index.js is a minified CDN build artifact produced by the documented build:cdn script; not obfuscation. | ai | |
| source-diff | net-exec-file:cdn/index.js | AI (source-diff): Network calls and dynamic patterns in cdn/index.js are part of the legitimate frontend bundle, not dropper behavior. | ai |