@likec4/core
A core package for LikeC4, containing types, api, utilities and guards.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/shared/core.CoLQkcYL.d.mts | AI (source-diff): Generated shared type declarations, unbuild output. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CoLQkcYL.d.cts | AI (source-diff): Generated shared type declarations, unbuild output. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CYtN9Czk.d.mts | AI (source-diff): Bundled .d.mts type declarations, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CYtN9Czk.d.cts | AI (source-diff): Bundled .d.cts type declarations, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CYtN9Czk.d.ts | AI (source-diff): Bundled .d.ts type declarations, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.zgP5gtDY.d.ts | AI (source-diff): Bundled type declarations from unbuild, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.zgP5gtDY.d.cts | AI (source-diff): Bundled type declarations from unbuild, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.zgP5gtDY.d.mts | AI (source-diff): Bundled type declarations from unbuild, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Ik3-ZP2n.d.ts | AI (source-diff): Bundled TS declaration file (long export line), not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Ik3-ZP2n.d.cts | AI (source-diff): Bundled TS declaration file (long export line), not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Ik3-ZP2n.d.mts | AI (source-diff): Bundled TS declaration file (long export line), not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.dY8efyk0.d.cts | AI (source-diff): Bundled TS type declarations, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.dY8efyk0.d.ts | AI (source-diff): Bundled TS type declarations, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.dY8efyk0.d.mts | AI (source-diff): Bundled TS type declarations, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.9l7eW3pn.d.cts | AI (source-diff): Bundled type-fest .d.cts declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.9l7eW3pn.d.mts | AI (source-diff): Bundled type-fest .d.mts declarations, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CAcZ6_cP.mjs | AI (source-diff): Bundled build output (unbuild/rollup chunk), not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.DJvmfnEi.d.mts | AI (source-diff): Generated type declarations, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Bjl6Kmc8.mjs | AI (source-diff): Bundled build output from unbuild/rollup, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.BqezHsjR.mjs | AI (source-diff): Bundled build output from unbuild/rollup, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CcjDE4j7.mjs | AI (source-diff): Bundled build output from unbuild/rollup, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.BreLKHbT.d.mts | AI (source-diff): Minified type declaration bundle, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/utils/index.d.mts | AI (source-diff): Minified type declaration bundle, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Mz23ea8u.mjs | AI (source-diff): Bundled/minified build output from unbuild, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CHsHWcLq.mjs | AI (source-diff): Bundled/minified build output from unbuild, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.uGbvOLGK.mjs | AI (source-diff): Rollup-bundled minified chunk. | ai | |
| source-diff | obfuscated-file:dist/shared/core.DEzbhxsA.cjs | AI (source-diff): Rollup-bundled minified chunk, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.DqmAHWZs.cjs | AI (source-diff): Bundled build output, matches package exports map. | ai | |
| source-diff | obfuscated-file:dist/shared/core.BS_nXBsP.d.cts | AI (source-diff): Generated .d.cts type bundle, long lines from type merging. | ai | |
| source-diff | obfuscated-file:dist/shared/core.f1tiPwpd.mjs | AI (source-diff): Rollup-bundled minified chunk. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CJaCUZQ9.d.mts | AI (source-diff): Generated type declaration bundle. | ai | |
| source-diff | obfuscated-file:dist/shared/core.zj2huD5x.mjs | AI (source-diff): Bundled build output, not true obfuscation. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established monorepo package with sparse per-package README; not spam. | ai | |
| source-diff | obfuscated-file:dist/shared/core.z6g06scf.d.mts | AI (source-diff): Generated type declaration file, long lines from bundling not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Cu-UdkSl.mjs | AI (source-diff): Bundled build output (unbuild/rollup), not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.YyjkRVss.mjs | AI (source-diff): Bundled build output (unbuild/rollup chunk), not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.mpx5crlJ.mjs | AI (source-diff): Bundled/minified build chunk from unbuild, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Dw47t7nG.mjs | AI (source-diff): Minified bundled output from unbuild/rollup, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CE_hG7EJ.d.mts | AI (source-diff): Bundled type declarations, long lines from re-exports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Bp-IQmJR.mjs | AI (source-diff): Minified bundled output from unbuild/rollup, not obfuscation. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Diff base is many versions behind; reflects normal bundler build growth. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Expected from bundled dist output vs old diff baseline, not injected payload. | ai | |
| source-diff | obfuscated-file:dist/index.d.cts | AI (source-diff): Bundled type-declaration output from unbuild, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index.d.mts | AI (source-diff): Bundled type-declaration output from unbuild, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.C4jDMQ1i.d.cts | AI (source-diff): Minified type-declaration rollup from unbuild, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.C4jDMQ1i.d.mts | AI (source-diff): Minified type-declaration rollup from unbuild, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.C4jDMQ1i.d.ts | AI (source-diff): Minified type-declaration rollup from unbuild, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/types/index.d.cts | AI (source-diff): Minified type-declaration rollup from unbuild, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/types/index.d.mts | AI (source-diff): Minified type-declaration rollup from unbuild, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.RnUJywKk.mjs | AI (source-diff): Standard minified ESM build chunk from unbuild; pattern is stable across all versions of this package. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Ddua-wiI.d.mts | AI (source-diff): Bundled TypeScript declaration file; long lines are from type exports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.Bpou6c2f.d.mts | AI (source-diff): TypeScript declaration file with long import lines from bundler; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/shared/core.D-ZGWDDt.d.mts | AI (source-diff): TypeScript declaration file with long import lines from bundler; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/shared/core.aWJgARyY.d.mts | AI (source-diff): Bundled TypeScript declaration file with long import lines; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/shared/core.B65NlqR_.d.mts | AI (source-diff): TypeScript declaration file with long import lines from bundler; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/shared/core.BB6zA-UU.mjs | AI (source-diff): Standard unbuild/rollup bundle chunk; samples show readable library code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/shared/core.D0NziuvN.mjs | AI (source-diff): Standard bundler chunk output with hash-named files; readable imports and known library code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/shared/core.DxDn5nB5.d.mts | AI (source-diff): TypeScript declaration file with long lines from complex generics; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/shared/core.HUONfQfd.mjs | AI (source-diff): Bundler-generated chunk; sample shows normal CJS-interop helper code. | ai | |
| source-diff | obfuscated-file:dist/shared/core.BlwZ4tBa.mjs | AI (source-diff): Bundler-generated chunk with hash suffix; content is readable ESM, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/shared/core.DFi2dOTl.mjs | AI (source-diff): Rollup/Vite chunk output with readable code; minification is expected for this bundled library. | ai | |
| source-diff | obfuscated-file:dist/shared/core.C8YY6Uub.mjs | AI (source-diff): Rollup/Vite chunk output with readable code; minification is expected for this bundled library. | ai | |
| source-diff | obfuscated-file:dist/shared/core.DDynPqbh.mjs | AI (source-diff): Standard Rollup/unbuild chunk output; long lines are minified but readable JS, no encoded payloads. | ai | |
| source-diff | obfuscated-file:dist/shared/core.1pNeDdRk.d.mts | AI (source-diff): TypeScript declaration file with long lines from bundled type exports; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/shared/core.PqNe5WxQ.mjs | AI (source-diff): Standard rollup/unbuild chunk output with hash in filename; not obfuscated, just minified bundler output. | ai | |
| source-diff | obfuscated-file:dist/shared/core.CtKXPqN_.mjs | AI (source-diff): Standard rollup/unbuild chunk output with hash in filename; not obfuscated, just minified bundler output. | ai | |
| source-diff | obfuscated-file:dist/shared/core.IWLie-Ma.d.mts | AI (source-diff): Bundled TypeScript declaration file with long lines; normal for generated .d.mts output from unbuild. | ai | |
| phantom-deps | phantom-dep:rehype-format | AI (phantom-deps): rehype-format is a declared runtime dep used transitively in the unified pipeline; phantom-dep heuristic false positive. | ai | |
| source-diff | obfuscated-file:dist/shared/core.btEq3i3f.mjs | AI (source-diff): Long lines are minified bundle output (readable library code); not obfuscation. Stable pattern for this package's dist artifacts. | ai | |
| source-diff | obfuscated-file:dist/_chunks/manual-layout.mjs | AI (source-diff): Minified internal layout module; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/_chunks/geometry.mjs | AI (source-diff): Minified geometry utility code; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/unified.mjs | AI (source-diff): Minified unified lib; legitimate remark/rehype ecosystem. | ai | |
| source-diff | obfuscated-file:dist/_chunks/types.mjs | AI (source-diff): Minified internal types module; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/_chunks/model.mjs | AI (source-diff): Minified internal model module; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/mdast-util-find-and-replace.mjs | AI (source-diff): Bundled mdast utility; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/to-text.mjs | AI (source-diff): Package's own bundled module; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/RichText.mjs | AI (source-diff): Package's own bundled module; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/remeda.mjs | AI (source-diff): Bundled remeda utility library; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/ohash.mjs | AI (source-diff): Bundled ohash library; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/mnemonist.mjs | AI (source-diff): Bundled mnemonist library; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/micromark-extension-gfm.mjs | AI (source-diff): Bundled micromark extension; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/mdast-util-to-hast.mjs | AI (source-diff): Bundled mdast utility; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/mdast-util-gfm.mjs | AI (source-diff): Bundled mdast utility; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/mdast-util-from-markdown.mjs | AI (source-diff): Bundled mdast utility; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/hast-util-to-html.mjs | AI (source-diff): Bundled hast-util-to-html; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/hast-util-sanitize.mjs | AI (source-diff): Bundled hast-util-sanitize; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/guards.mjs | AI (source-diff): Package's own bundled guards module; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/graphology.mjs | AI (source-diff): Bundled graphology library; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/graphology-dag.mjs | AI (source-diff): Bundled graphology-dag library; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/@radix-ui/colors.mjs | AI (source-diff): Bundled @radix-ui/colors data; minified color palette, not malicious. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/@mantine/colors-generator.mjs | AI (source-diff): Bundled @mantine/colors-generator library; minified, not malicious. | ai | |
| source-diff | obfuscated-file:dist/_chunks/libs/character-entities.mjs | AI (source-diff): HTML character entity table — minified data file, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/_chunks/calcDriftsFromSnapshot.mjs | AI (source-diff): Standard bundler minified output. | ai | |
| source-diff | obfuscated-file:dist/_chunks/Builder.view-element.mjs | AI (source-diff): Standard rolldown/bundler minified output; not obfuscated malware. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI/CD publishing is confirmed by SLSA provenance attestation; stable pattern for this package going forward. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @likec4/core is a scoped package in the likec4 ecosystem, not a typosquat of cors; edit-distance match is coincidental. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Declared in config files; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:immer | AI (phantom-deps): Declared in config files; stable false positive for this package. | ai |
Versions (showing 51 of 81)
| Version | Deps | Published |
|---|---|---|
| 1.58.0 | 3 / 42 | |
| 1.57.0 | 3 / 42 | |
| 1.56.0 | 3 / 42 | |
| 1.55.1 | 3 / 42 | |
| 1.55.0 | 3 / 42 | |
| 1.54.0 | 3 / 42 | |
| 1.53.0 | 3 / 42 | |
| 1.52.0 | 3 / 42 | |
| 1.51.0 | 3 / 42 | |
| 1.50.0 | 3 / 42 | |
| 1.49.0 | 3 / 42 | |
| 1.48.0 | 4 / 40 | |
| 1.47.0 | 1 / 40 | |
| 1.46.4 | 1 / 39 | |
| 1.46.3 | 1 / 39 | |
| 1.46.2 | 1 / 39 | |
| 1.46.0 | 1 / 39 | |
| 1.45.0 | 1 / 39 | |
| 1.44.0 | 1 / 39 | |
| 1.43.0 | 1 / 38 | |
| 1.42.1 | 1 / 38 | |
| 1.42.0 | 1 / 38 | |
| 1.41.0 | 15 / 22 | |
| 1.40.0 | 15 / 22 | |
| 1.39.5 | 15 / 22 | |
| 1.39.4 | 15 / 22 | |
| 1.39.3 | 15 / 22 | |
| 1.39.2 | 15 / 22 | |
| 1.39.1 | 15 / 22 | |
| 1.39.0 | 15 / 22 | |
| 1.38.1 | 13 / 24 | |
| 1.38.0 | 13 / 24 | |
| 1.37.0 | 13 / 24 | |
| 1.36.1 | 13 / 24 | |
| 1.36.0 | 13 / 24 | |
| 1.35.0 | 11 / 26 | |
| 1.34.2 | 11 / 25 | |
| 1.34.1 | 11 / 25 | |
| 1.34.0 | 11 / 25 | |
| 1.33.0 | 11 / 25 | |
| 1.32.2 | 1 / 20 | |
| 1.32.1 | 1 / 20 | |
| 1.32.0 | 1 / 20 | |
| 1.31.0 | 1 / 20 | |
| 1.30.0 | 1 / 20 | |
| 1.28.0 | 1 / 20 | |
| 1.27.1 | 1 / 20 | |
| 1.26.1 | 1 / 19 | |
| 1.26.0 | 1 / 19 | |
| 1.24.1 | 1 / 19 | |
| 1.23.1 | 1 / 19 |
v1.52.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.38.1
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.38.0
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.37.0
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.30.0
7 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: davydkov.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.28.0
7 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: davydkov.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.27.1
7 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: davydkov.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26.1
7 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: davydkov.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26.0
7 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: davydkov.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.24.1
8 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: davydkov.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.23.1
12 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: davydkov.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.