@kb-labs/quality-entry
Quality Plugin CLI commands for monorepo analysis, health checks, and automated fixes.
51
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
k.baranov
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | encoded-string-file:dist/widgets/586.js | AI (source-diff): Webpack/rspack bundle with standard chart library code; long encoded strings are minified identifiers, not malicious payloads. | ai | |
| source-diff | obfuscated-file:dist/widgets/418.js | AI (source-diff): Minified chart library bundle (G2/AntV area/bar/column/line/pie); standard build output. | ai | |
| source-diff | net-exec-file:dist/widgets/418.js | AI (source-diff): Same webpack chunk-loading pattern; no malicious network targets visible. | ai | |
| source-diff | net-exec-file:dist/widgets/330.js | AI (source-diff): Network calls in minified bundle are from bundled libraries, not malicious loaders. | ai | |
| source-diff | obfuscated-file:dist/widgets/165.js | AI (source-diff): Minified react-dom bundle; react.dev error URLs confirm legitimate React source. | ai | |
| source-diff | obfuscated-file:dist/widgets/405.js | AI (source-diff): Minified React core bundle; Symbol.for react.* identifiers confirm legitimate source. | ai | |
| source-diff | obfuscated-file:dist/widgets/546.js | AI (source-diff): Minified react-dom bundle identical pattern to 165.js; legitimate React source. | ai | |
| source-diff | obfuscated-file:dist/widgets/591.js | AI (source-diff): Theme/design-token constants bundle; plaintext color/spacing values confirm benign content. | ai | |
| source-diff | obfuscated-file:dist/widgets/162.js | AI (source-diff): Standard webpack/rspack minified bundle of React+antd components; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/widgets/775.js | AI (source-diff): Webpack chunk from rspack build; consistent with antd widget bundling pattern. | ai | |
| source-diff | obfuscated-file:dist/widgets/884.js | AI (source-diff): Webpack chunk from rspack build; consistent with antd widget bundling pattern. | ai | |
| source-diff | obfuscated-file:dist/widgets/919.js | AI (source-diff): Webpack chunk from rspack build; consistent with antd widget bundling pattern. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): zod is a runtime dep in package.json; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:@kb-labs/plugin-contracts | AI (phantom-deps): Same-org dep declared in dependencies; used transitively or via manifest, stable FP. | ai | |
| source-diff | obfuscated-file:dist/widgets/694.js | AI (source-diff): Webpack chunk from rspack build; consistent with antd widget bundling pattern. | ai | |
| source-diff | net-exec-file:dist/widgets/162.js | AI (source-diff): Network calls and dynamic requires are part of React/antd bundle; no malicious payload. | ai | |
| source-diff | obfuscated-file:dist/widgets/330.js | AI (source-diff): Standard webpack/rspack minified bundle; identifiable RxJS/utility library code. | ai |
Versions (showing 51 of 57)
| Version | Deps | Published |
|---|---|---|
| 2.94.0 | 5 / 15 | |
| 2.93.0 | 5 / 15 | |
| 2.89.0 | 5 / 15 | |
| 2.88.0 | 5 / 15 | |
| 2.87.0 | 5 / 15 | |
| 2.82.0 | 5 / 15 | |
| 2.81.0 | 5 / 15 | |
| 2.80.0 | 5 / 15 | |
| 2.79.0 | 5 / 15 | |
| 2.77.0 | 5 / 15 | |
| 2.75.0 | 5 / 15 | |
| 2.74.0 | 5 / 15 | |
| 2.73.0 | 5 / 15 | |
| 2.72.0 | 5 / 15 | |
| 2.68.0 | 5 / 15 | |
| 2.67.0 | 5 / 15 | |
| 2.66.0 | 5 / 15 | |
| 2.65.0 | 5 / 15 | |
| 2.64.0 | 5 / 15 | |
| 2.62.0 | 5 / 15 | |
| 2.61.0 | 5 / 15 | |
| 2.60.0 | 5 / 15 | |
| 2.59.0 | 5 / 15 | |
| 2.58.0 | 5 / 15 | |
| 2.57.0 | 5 / 15 | |
| 2.56.0 | 5 / 15 | |
| 2.55.0 | 5 / 15 | |
| 2.54.0 | 5 / 15 | |
| 2.53.0 | 5 / 15 | |
| 2.47.0 | 5 / 15 | |
| 2.46.0 | 5 / 15 | |
| 2.45.0 | 5 / 15 | |
| 2.44.0 | 5 / 15 | |
| 2.43.0 | 5 / 15 | |
| 2.42.0 | 5 / 15 | |
| 2.41.0 | 5 / 15 | |
| 2.40.0 | 5 / 15 | |
| 2.39.0 | 5 / 15 | |
| 2.38.0 | 5 / 15 | |
| 2.37.0 | 5 / 15 | |
| 2.36.0 | 5 / 15 | |
| 2.35.0 | 5 / 15 | |
| 2.34.0 | 5 / 15 | |
| 2.33.0 | 5 / 15 | |
| 2.32.0 | 5 / 15 | |
| 2.31.0 | 5 / 15 | |
| 2.30.0 | 5 / 15 | |
| 2.29.0 | 5 / 15 | |
| 2.28.0 | 5 / 15 | |
| 2.25.0 | 5 / 15 | |
| 2.23.0 | 5 / 15 |