← Home

@murumets-ee/admin-ui

Admin panel shell — sidebar, header, entity list, entity form, API handler, and command palette.

77
Versions
Elastic-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

ranx2k

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/use-content-editor-DjjxyXc5.mjs AI (source-diff): Standard tsdown/ESM minified output; readable React logic, no obfuscation. ai
source-diff obfuscated-file:dist/plugin.mjs AI (source-diff): Standard tsdown/ESM minified output; readable zod/route logic, no obfuscation. ai
source-diff obfuscated-file:dist/nav-editor.mjs AI (source-diff): Standard tsdown/ESM minified output; readable React logic, no obfuscation. ai
source-diff obfuscated-file:dist/locale-editor.mjs AI (source-diff): Standard tsdown/ESM minified output; readable React logic, no obfuscation. ai
source-diff obfuscated-file:dist/hooks-Sel7FA1q.mjs AI (source-diff): Standard tsdown/ESM minified output; readable React logic, no obfuscation. ai
source-diff obfuscated-file:dist/version-history-panel-fmTnukEC.mjs AI (source-diff): Standard tsdown/ESM minified output; readable React logic, no obfuscation. ai
source-diff obfuscated-file:dist/use-content-editor-C-18XgZw.mjs AI (source-diff): Standard tsdown/Rollup minified ESM bundle; content is readable React UI component logic. ai
source-diff obfuscated-file:dist/hooks-BXqdndfe.mjs AI (source-diff): Standard tsdown/Rollup minified ESM bundle; content is readable React/SSE logic, not obfuscated malware. ai
source-diff obfuscated-file:dist/version-history-panel-BuU010o6.mjs AI (source-diff): Standard tsdown/Rollup minified ESM bundle; content is readable React diff/history UI logic. ai
phantom-deps phantom-dep:@murumets-ee/media AI (phantom-deps): Monorepo sibling bundled into dist; phantom-dep heuristic false positive. ai
phantom-deps phantom-dep:@murumets-ee/auth AI (phantom-deps): Monorepo sibling bundled into dist; phantom-dep heuristic false positive. ai
phantom-deps phantom-dep:@murumets-ee/ui AI (phantom-deps): Monorepo sibling bundled into dist; phantom-dep heuristic false positive. ai
source-diff obfuscated-file:dist/uploads.mjs AI (source-diff): Standard tsdown/Rollup minified ESM bundle using @uppy; no malicious content. ai
phantom-deps phantom-dep:@murumets-ee/db AI (phantom-deps): Monorepo sibling bundled into dist; phantom-dep heuristic false positive. ai
source-diff obfuscated-file:dist/hooks-B99DGR-R.mjs AI (source-diff): Standard tsdown/Rollup minified ESM bundle; no malicious content in samples. ai
phantom-deps phantom-dep:@uppy/tus AI (phantom-deps): Used in bundled dist/uploads.mjs; phantom-dep heuristic misses bundled imports. ai
source-diff obfuscated-file:dist/use-content-editor-C_asGBQO.mjs AI (source-diff): Standard tsdown/Rollup minified ESM bundle; no malicious content in samples. ai
source-diff obfuscated-file:dist/version-history-panel-BELRD1Jy.mjs AI (source-diff): Standard tsdown/Rollup minified ESM bundle; no malicious content in samples. ai
phantom-deps phantom-dep:@murumets-ee/notifications AI (phantom-deps): Monorepo sibling bundled into dist; phantom-dep heuristic false positive. ai
phantom-deps phantom-dep:@murumets-ee/content AI (phantom-deps): Monorepo sibling bundled into dist; phantom-dep heuristic false positive. ai
source-diff obfuscated-file:dist/search.mjs AI (source-diff): Minified ESM bundle with search UI hook; no malicious patterns. ai
source-diff obfuscated-file:dist/hooks-ljB4JPKk.mjs AI (source-diff): Standard tsdown/rollup minified ESM bundle; readable React SSE hook logic, no malicious patterns. ai
source-diff obfuscated-file:dist/notifications.mjs AI (source-diff): Minified ESM bundle with notification list UI; no malicious patterns. ai
publish-pattern new-deps-added AI (publish-pattern): All new deps are same-org @murumets-ee/* siblings at matching 0.14.0 version; coordinated monorepo release. ai
source-diff obfuscated-file:dist/use-content-editor-B8fKX9Jz.mjs AI (source-diff): Bundler-minified React UI code; stable pattern for this package. ai
source-diff obfuscated-file:dist/settings-form.mjs AI (source-diff): Bundler-minified React UI code; stable pattern for this package. ai
source-diff obfuscated-file:dist/pages.mjs AI (source-diff): Bundler-minified React UI code with readable imports; not obfuscated malware. ai
source-diff obfuscated-file:dist/version-history-panel-DQg8us8b.mjs AI (source-diff): Bundler-minified React UI code; stable pattern for this package. ai
source-diff obfuscated-file:dist/use-content-editor-COD5s7dH.mjs AI (source-diff): Standard tsdown minified ESM output; content is legitimate React hook code. ai
source-diff obfuscated-file:dist/server.mjs AI (source-diff): Standard tsdown minified ESM output; content is legitimate server-side admin API code. ai
source-diff obfuscated-file:dist/permissions.mjs AI (source-diff): Standard tsdown minified ESM output; content is legitimate React UI code. ai
source-diff obfuscated-file:dist/index.mjs AI (source-diff): Standard tsdown minified ESM output; content is legitimate React UI code. ai
source-diff obfuscated-file:dist/entity-list.mjs AI (source-diff): Standard tsdown minified ESM output; content is legitimate React UI code. ai
source-diff obfuscated-file:dist/audit-log.mjs AI (source-diff): Standard tsdown minified ESM output; content is legitimate React UI code. ai
source-diff obfuscated-file:dist/entity-form.mjs AI (source-diff): Standard tsdown minified ESM output; content is legitimate React UI code. ai
source-diff obfuscated-file:dist/workflow.mjs AI (source-diff): Standard tsdown minified ESM output; consistent with rest of package build. ai
source-diff obfuscated-file:dist/version-history-panel-CHA4HiCT.mjs AI (source-diff): Standard tsdown minified ESM output; consistent with rest of package build. ai
source-diff obfuscated-file:dist/users.mjs AI (source-diff): Standard tsdown minified ESM output; content is legitimate React UI code. ai
phantom-deps phantom-dep:@radix-ui/react-slot AI (phantom-deps): Declared in dependencies; used by UI component library. ai
phantom-deps phantom-dep:@radix-ui/react-visually-hidden AI (phantom-deps): Declared in dependencies; used by UI component library. ai
phantom-deps phantom-dep:@radix-ui/react-tooltip AI (phantom-deps): Declared in dependencies; used by UI component library. ai
phantom-deps phantom-dep:@radix-ui/react-dialog AI (phantom-deps): Declared in dependencies; used by UI component library. ai
phantom-deps phantom-dep:tailwind-merge AI (phantom-deps): Declared in dependencies; used by UI component library. ai

Versions (showing 77 of 77)

Version Deps Published
0.36.0 21 / 28
0.35.1 21 / 28
0.35.0 21 / 28
0.34.1 20 / 28
0.34.0 20 / 28
0.33.0 20 / 28
0.32.3 20 / 28
0.32.2 20 / 28
0.32.1 20 / 28
0.32.0 20 / 28
0.31.0 20 / 28
0.30.0 20 / 28
0.29.2 20 / 28
0.29.1 20 / 28
0.29.0 20 / 28
0.28.0 20 / 28
0.27.0 20 / 28
0.26.3 20 / 28
0.26.2 20 / 28
0.26.1 20 / 28
0.26.0 20 / 28
0.25.0 20 / 29
0.24.1 20 / 29
0.24.0 20 / 29
0.23.2 20 / 29
0.23.1 20 / 29
0.23.0 20 / 29
0.22.1 20 / 29
0.22.0 20 / 29
0.21.1 20 / 29
0.21.0 20 / 29
0.20.0 20 / 29
0.19.0 18 / 29
0.18.0 18 / 29
0.17.1 18 / 29
0.17.0 18 / 29
0.16.5 18 / 29
0.16.4 18 / 29
0.16.3 18 / 29
0.16.2 18 / 29
0.16.1 18 / 29
0.16.0 18 / 29
0.15.4 18 / 29
0.15.3 18 / 29
0.15.2 18 / 29
0.15.1 18 / 29
0.15.0 18 / 29
0.14.0 18 / 29
0.13.3 18 / 29
0.13.2 18 / 29
0.13.1 18 / 29
0.13.0 18 / 29
0.12.0 18 / 29
0.11.0 16 / 26
0.10.0 16 / 26
0.9.0 16 / 26
0.8.0 16 / 26
0.7.0 16 / 26
0.6.1 16 / 26
0.6.0 16 / 26
0.5.1 16 / 26
0.5.0 16 / 26
0.4.8 6 / 26
0.4.7 6 / 26
0.4.6 6 / 26
0.4.5 6 / 26
0.4.4 6 / 26
0.4.0 6 / 26
0.3.0 6 / 26
0.2.1 6 / 26
0.2.0 6 / 26
0.1.5 6 / 23
0.1.4 6 / 19
0.1.3 6 / 19
0.1.2 6 / 19
0.1.1 6 / 19
0.1.0 6 / 19

v0.36.0

7 findings
HIGH New obfuscated file: dist/hooks-Sel7FA1q.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/locale-editor.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/nav-editor.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/plugin.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/use-content-editor-DjjxyXc5.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/version-history-panel-fmTnukEC.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.1

7 findings
HIGH New obfuscated file: dist/hooks-Sel7FA1q.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/locale-editor.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/nav-editor.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/plugin.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/use-content-editor-DjjxyXc5.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/version-history-panel-fmTnukEC.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.0

7 findings
HIGH New obfuscated file: dist/hooks-Sel7FA1q.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/locale-editor.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/nav-editor.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/plugin.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/use-content-editor-DjjxyXc5.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/version-history-panel-fmTnukEC.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.