@intlayer/core
Includes core Intlayer functions like translation, dictionary, and utility functions shared across multiple packages.
20
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ay.pineau
Keywords
intlayerlayerabstractiondatainternationalizationi18ntypescriptjavascriptjsonfile
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/esm/getContent-DKqtIZGL.mjs | AI (source-diff): Standard minified ESM bundle; i18n content retrieval logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/cjs/getContent-DrqM8pqO.cjs | AI (source-diff): Standard minified CJS bundle output; content is i18n translation logic, no malicious patterns. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Intlayer's README is documentation-heavy with many links; not a phishing/spam package — stable false positive for this org. | ai | |
| source-diff | obfuscated-file:dist/esm/messageFormat/vue-i18n.mjs | AI (source-diff): Standard minified ESM build output; vue-i18n parser, no malicious patterns. | ai | |
| phantom-deps | phantom-dep:@intlayer/dictionaries-entry | AI (phantom-deps): Same-org optional dep used indirectly; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/messageFormat/i18next.cjs | AI (source-diff): Standard minified build output; content is i18next format parser. | ai | |
| source-diff | obfuscated-file:dist/cjs/messageFormat/ICU.cjs | AI (source-diff): Standard minified build output; content is ICU message format parser. | ai | |
| source-diff | obfuscated-file:dist/cjs/messageFormat/vue-i18n.cjs | AI (source-diff): Standard minified build output; content is vue-i18n format parser. | ai | |
| source-diff | obfuscated-file:dist/esm/markdown/compiler.mjs | AI (source-diff): Standard minified ESM build output; content is markdown compiler. | ai | |
| source-diff | obfuscated-file:dist/esm/markdown/constants.mjs | AI (source-diff): Standard minified ESM build output; content is markdown constants. | ai | |
| source-diff | obfuscated-file:dist/esm/markdown/index.mjs | AI (source-diff): Standard minified ESM build output; re-exports markdown module. | ai | |
| source-diff | obfuscated-file:dist/esm/messageFormat/ICU.mjs | AI (source-diff): Standard minified ESM build output; content is ICU parser. | ai | |
| source-diff | obfuscated-file:dist/esm/messageFormat/i18next.mjs | AI (source-diff): Standard minified ESM build output; content is i18next parser. | ai | |
| source-diff | obfuscated-file:dist/cjs/markdown/compiler.cjs | AI (source-diff): Standard minified build output from tsdown/rolldown; content is markdown parser logic. | ai | |
| source-diff | obfuscated-file:dist/cjs/markdown/constants.cjs | AI (source-diff): Standard minified build output; content is markdown constants. | ai | |
| source-diff | obfuscated-file:dist/cjs/markdown/index.cjs | AI (source-diff): Standard minified build output; re-exports markdown module. | ai | |
| provenance | missing-githead | AI (provenance): High-volume, well-established package; missing gitHead appears to be a publish environment change, not a supply chain indicator. | ai | |
| provenance | no-provenance | AI (provenance): Established package with strong publisher track record; provenance not historically present. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): defu is a well-known utility; swap from deepmerge is routine for this package. | ai | |
| phantom-deps | phantom-dep:@intlayer/unmerged-dictionaries-entry | AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic not applicable here. | ai | |
| phantom-deps | phantom-dep:@intlayer/api | AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic not applicable here. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): Scoped @intlayer/core is an i18n library, not a typosquat of cors; name similarity is coincidental. | ai | |
| phantom-deps | phantom-dep:defu | AI (phantom-deps): defu is a declared runtime dep; phantom-dep heuristic false positive for this package. | ai |