← Home

@murumets-ee/ticketing

Helpdesk ticketing — tickets, messages, departments, SLA, CSAT, email threading, and SSE events.

51
Versions
Elastic-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

ranx2k

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/ticket-DQTp_fBv.mjs AI (source-diff): Minified rolldown bundle with entity schema definitions; not obfuscated. ai
source-diff obfuscated-file:dist/ticket-message-DB1kBYrH.mjs AI (source-diff): Minified rolldown bundle with entity schema definitions; not obfuscated. ai
source-diff obfuscated-file:dist/ticket-message-Ce8ojFu7.mjs AI (source-diff): Minified entity/module bundle (rolldown output); content is readable domain logic. ai
source-diff obfuscated-file:dist/ticket-X5kPpTNB.mjs AI (source-diff): Minified entity/module bundle (rolldown output); content is readable domain logic. ai
source-diff obfuscated-file:dist/ticket-read-state-BvPi-NWx.mjs AI (source-diff): Minified entity/module bundle (rolldown output); content is readable domain logic. ai
source-diff obfuscated-file:dist/ticket-message-EXRCtQhA.mjs AI (source-diff): Bundled entity schema module; minified rolldown output, no obfuscation. ai
source-diff obfuscated-file:dist/ticket-read-state-NGl01d6Q.mjs AI (source-diff): Bundled module with realtime/config logic; minified rolldown output, no obfuscation. ai
source-diff obfuscated-file:dist/ticket-DwqA0Zo_.mjs AI (source-diff): Bundled entity schema module; minified rolldown output, no obfuscation. ai
source-diff obfuscated-file:dist/ticket-message-BduAbu5O.mjs AI (source-diff): Minified rolldown bundle with entity schema; not obfuscated. ai
source-diff obfuscated-file:dist/ticket-M8L8sbMK.mjs AI (source-diff): Minified rolldown bundle with entity schema; not obfuscated. ai
source-diff obfuscated-file:dist/ticket-read-state-BnQlFkDa.mjs AI (source-diff): Minified rolldown bundle with realtime/config logic; not obfuscated. ai
source-diff obfuscated-file:dist/en-C034xVmw.mjs AI (source-diff): Minified rolldown bundle containing i18n locale strings; not obfuscated. ai
source-diff obfuscated-file:dist/ticket-message-DSxc2M6L.mjs AI (source-diff): Minified rolldown bundle with entity schema definitions; not obfuscated. ai
source-diff obfuscated-file:dist/ticket-Cb9cj-aM.mjs AI (source-diff): Minified rolldown bundle with entity schema definitions; not obfuscated. ai
source-diff obfuscated-file:dist/ru-CuHcoFJy.mjs AI (source-diff): Minified rolldown bundle containing Russian i18n locale strings; not obfuscated. ai
source-diff obfuscated-file:dist/et-2bpgnwHX.mjs AI (source-diff): Minified rolldown bundle containing Estonian i18n locale strings; not obfuscated. ai
source-diff obfuscated-file:dist/ticket-message-DT1wlX9X.mjs AI (source-diff): Minified entity schema bundle (tsdown); content is ticket_message field definitions, not obfuscation. ai
source-diff obfuscated-file:dist/ticket-read-state-M8oYraH3.mjs AI (source-diff): Minified realtime/config bundle (tsdown); content is event publishing helpers, not obfuscation. ai
source-diff obfuscated-file:dist/ru-Bn2w4mpC.mjs AI (source-diff): Minified i18n locale bundle (tsdown); long lines are JSON string data, not obfuscation. ai
source-diff obfuscated-file:dist/et-Bh9lpmyB.mjs AI (source-diff): Minified i18n locale bundle (tsdown); long lines are JSON string data, not obfuscation. ai
source-diff obfuscated-file:dist/en-BbXDIgnF.mjs AI (source-diff): Minified i18n locale bundle (tsdown); long lines are JSON string data, not obfuscation. ai
source-diff obfuscated-file:dist/ticket-CnAwnQ5x.mjs AI (source-diff): Minified entity schema bundle (tsdown); content is ticket field definitions, not obfuscation. ai
source-diff obfuscated-file:dist/et-CxtQxuvT.mjs AI (source-diff): Bundled i18n locale file (Estonian strings); long lines are minified build output, not obfuscation. ai
source-diff obfuscated-file:dist/ru-bpLuZk-6.mjs AI (source-diff): Bundled i18n locale file (Russian strings); long lines are minified build output, not obfuscation. ai
source-diff obfuscated-file:dist/en-BaEhM2aP.mjs AI (source-diff): Bundled i18n locale file (English strings); long lines are minified build output, not obfuscation. ai
source-diff obfuscated-file:dist/ticket-CfO838C7.mjs AI (source-diff): Minified entity definition bundle from tsdown; readable logic, no malicious behavior. ai
source-diff obfuscated-file:dist/ticket-read-state-BNrUTmVY.mjs AI (source-diff): Minified bundle from tsdown; realtime/mail logic, no malicious behavior. ai
source-diff obfuscated-file:dist/ticket-message-BSBzIR-L.mjs AI (source-diff): Minified entity definition bundle from tsdown; readable logic, no malicious behavior. ai
phantom-deps phantom-dep:node-html-parser AI (phantom-deps): node-html-parser is visibly imported in the dist bundle for HTML parsing; phantom-dep is a false positive here. ai
source-diff obfuscated-file:dist/ticket-read-state-aaBbQ_Ed.mjs AI (source-diff): Standard rolldown/tsdown minified ESM bundle; content is readable realtime/mail logic. ai
source-diff obfuscated-file:dist/ticket-message-BobRHqTf.mjs AI (source-diff): Standard rolldown/tsdown minified ESM bundle; content is readable entity/hook logic. ai
source-diff obfuscated-file:dist/ticket-jWfM451A.mjs AI (source-diff): Standard rolldown/tsdown minified ESM bundle; content is readable entity/business logic. ai
source-diff obfuscated-file:dist/ru-BKJsPFHA.mjs AI (source-diff): Standard rolldown/tsdown minified ESM bundle; content is plaintext i18n strings. ai
source-diff obfuscated-file:dist/et-DnCkjmQ-.mjs AI (source-diff): Standard rolldown/tsdown minified ESM bundle; content is plaintext i18n strings. ai
source-diff obfuscated-file:dist/en-CNf06SL9.mjs AI (source-diff): Standard rolldown/tsdown minified ESM bundle; content is plaintext i18n strings. ai
source-diff obfuscated-file:dist/ticket-C_NoxDta.mjs AI (source-diff): Minified entity-definition bundle from tsdown build; content is legitimate ticketing schema code. ai
source-diff obfuscated-file:dist/ticket-message-C3g9lf2k.mjs AI (source-diff): Minified entity-definition bundle from tsdown build; content is legitimate ticket-message schema code. ai
source-diff obfuscated-file:dist/en-Bxq7myra.mjs AI (source-diff): tsdown bundle output; content is plaintext i18n locale strings, not obfuscated code. ai
source-diff obfuscated-file:dist/ru-DrqwI-bj.mjs AI (source-diff): tsdown bundle output; content is plaintext i18n locale strings (Russian), not obfuscated code. ai
source-diff obfuscated-file:dist/et-D9uYByfC.mjs AI (source-diff): tsdown bundle output; content is plaintext i18n locale strings (Estonian), not obfuscated code. ai
source-diff obfuscated-file:dist/en-YxJFumY_.mjs AI (source-diff): Minified i18n locale bundle from tsdown/rolldown build; content is plain translation strings. ai
source-diff obfuscated-file:dist/ru-Cr8_YWtJ.mjs AI (source-diff): Minified i18n locale bundle (Russian); content is plain translation strings. ai
source-diff obfuscated-file:dist/et-D42ENA91.mjs AI (source-diff): Minified i18n locale bundle (Estonian); content is plain translation strings. ai
source-diff obfuscated-file:dist/ticket-message-DLY0QVhE.mjs AI (source-diff): Minified entity-definition bundle from tsdown build; no malicious patterns. ai
source-diff obfuscated-file:dist/ticket-Dk8OG3lP.mjs AI (source-diff): Minified entity-definition bundle from tsdown build; no malicious patterns. ai
source-diff obfuscated-file:dist/ticket-message-WJny-R9B.mjs AI (source-diff): Minified entity definition bundle; content is readable business logic, not obfuscated code. ai
source-diff obfuscated-file:dist/ticket-Cdp2RK4M.mjs AI (source-diff): Minified entity definition bundle; content is readable business logic, not obfuscated code. ai
source-diff obfuscated-file:dist/ticket-message-CNVsHHWA.mjs AI (source-diff): Minified entity schema bundle from tsdown; content is readable entity definitions. ai
source-diff obfuscated-file:dist/ticket-27mb3qG8.mjs AI (source-diff): Minified entity schema bundle from tsdown; content is readable entity definitions. ai
source-diff obfuscated-file:dist/en-1QowXb-p.mjs AI (source-diff): Minified i18n locale bundle from tsdown build; no malicious content. ai
source-diff obfuscated-file:dist/et-B6Jyui1g.mjs AI (source-diff): Minified i18n locale bundle from tsdown build; no malicious content. ai
source-diff obfuscated-file:dist/ticket-message-Dctp5lnI.mjs AI (source-diff): Minified entity schema bundle from tsdown build; content is legitimate ticketing domain logic. ai
source-diff obfuscated-file:dist/ticket-5HE9gpX1.mjs AI (source-diff): Minified entity schema bundle from tsdown build; content is legitimate ticketing domain logic. ai
source-diff obfuscated-file:dist/ru-ComdI-vj.mjs AI (source-diff): Minified i18n locale bundle from tsdown build; no malicious content. ai
source-diff obfuscated-file:dist/en-CSrQeQsT.mjs AI (source-diff): Bundler-minified i18n locale file; content is plaintext translation strings, not obfuscation. ai
source-diff obfuscated-file:dist/et-BSi6luyu.mjs AI (source-diff): Bundler-minified i18n locale file; content is plaintext translation strings, not obfuscation. ai
source-diff obfuscated-file:dist/ticket-sOVhwzyR.mjs AI (source-diff): Bundler-minified Ticket entity; readable business logic, not obfuscation. ai
source-diff obfuscated-file:dist/ticket-message-DvFQZWFP.mjs AI (source-diff): Bundler-minified domain entity; readable business logic, not obfuscation. ai
source-diff obfuscated-file:dist/ru-DBEDBz5m.mjs AI (source-diff): Bundler-minified i18n locale file; content is plaintext translation strings, not obfuscation. ai
source-diff obfuscated-file:dist/ticket-read-state-DfuViCw-.mjs AI (source-diff): Minified rolldown build output; content is realtime/presence helpers and DB table definitions. ai
source-diff obfuscated-file:dist/schema-Dwuwf_zL.mjs AI (source-diff): Minified rolldown build output; content is plaintext drizzle-orm schema definitions, not obfuscated malware. ai
source-diff obfuscated-file:dist/ticket-Cfiyy4HE.mjs AI (source-diff): Minified rolldown build output; content is entity/behavior definitions with no malicious patterns. ai
source-diff obfuscated-file:dist/ticket-message-8rxB9yoJ.mjs AI (source-diff): Minified rolldown build output; content is ticket-message entity logic, no exfiltration or shell patterns. ai
source-diff obfuscated-file:dist/en-Dy_aL6BV.mjs AI (source-diff): Standard Rolldown minified i18n locale bundle; content is plaintext translation strings, not obfuscated code. ai
phantom-deps phantom-dep:@murumets-ee/auth AI (phantom-deps): Same-org dep used via dynamic import in minified bundle; phantom-dep heuristic is a false positive here. ai
phantom-deps phantom-dep:zod AI (phantom-deps): Monorepo build pattern; zod used transitively or in config, stable false positive for this package. ai
source-diff obfuscated-file:dist/ticket-read-state-BU_1Tdfr.mjs AI (source-diff): Rolldown minified realtime/table definition; readable business logic, no malicious patterns. ai
source-diff obfuscated-file:dist/ticket-message-B9Dl1fhq.mjs AI (source-diff): Rolldown minified entity definition; readable business logic, no malicious patterns. ai
source-diff obfuscated-file:dist/ticket-DtOKYAUM.mjs AI (source-diff): Rolldown minified entity definition; readable business logic, no malicious patterns. ai
source-diff obfuscated-file:dist/ru-Cntna9XO.mjs AI (source-diff): Standard Rolldown minified i18n locale bundle (Russian); no obfuscation. ai
source-diff obfuscated-file:dist/et-DUjxnzj_.mjs AI (source-diff): Standard Rolldown minified i18n locale bundle (Estonian); no obfuscation. ai
source-diff obfuscated-file:dist/et-o3ukW1vZ.mjs AI (source-diff): Minified i18n bundle; readable content, no malicious code. ai
source-diff obfuscated-file:dist/ticket-message-BdYnxaXu.mjs AI (source-diff): Minified rolldown build output; legitimate entity hook code. ai
source-diff obfuscated-file:dist/ticket-DfE91zym.mjs AI (source-diff): Minified rolldown build output; legitimate entity definition code. ai
source-diff obfuscated-file:dist/processor-_AnhDV_c.mjs AI (source-diff): Minified rolldown build output; legitimate email processor code. ai
source-diff obfuscated-file:dist/plugin-DzzgK7E5.mjs AI (source-diff): Minified rolldown build output; legitimate plugin/ORM code. ai
source-diff obfuscated-file:dist/ru-BRCHrozR.mjs AI (source-diff): Minified i18n bundle; readable content, no malicious code. ai
source-diff obfuscated-file:dist/en-Bg4GCglJ.mjs AI (source-diff): Minified i18n bundle; readable content, no malicious code. ai
source-diff obfuscated-file:dist/processor-Dg6QCE5d.mjs AI (source-diff): Minified email processor bundle; readable inbound mail logic, no malicious code. ai
source-diff obfuscated-file:dist/ticket-message-BNnUydxr.mjs AI (source-diff): Minified ticket-message entity bundle; readable entity logic. ai
source-diff obfuscated-file:dist/ticket-C3drPacj.mjs AI (source-diff): Minified ticket entity bundle; readable entity/field definitions. ai
source-diff obfuscated-file:dist/plugin-a-mcqEiG.mjs AI (source-diff): Minified plugin bundle; readable ORM/entity logic, no malicious code. ai
source-diff obfuscated-file:dist/processor-D5Prge0l.mjs AI (source-diff): Minified email processor logic; readable business logic, no malicious patterns. ai
source-diff obfuscated-file:dist/plugin-CoBkWpkH.mjs AI (source-diff): Minified plugin bundle with readable Drizzle ORM schema; standard tsdown output. ai
source-diff obfuscated-file:dist/ticket-message-gdtuvHF6.mjs AI (source-diff): Minified entity definition; domain-coherent ticketing logic, no malicious payload. ai
source-diff obfuscated-file:dist/ticket-CpSkB2Jd.mjs AI (source-diff): Minified entity definition; domain-coherent ticketing logic, no malicious payload. ai
source-diff obfuscated-file:dist/ru-CqnkxxAk.mjs AI (source-diff): Minified locale/i18n bundle; no obfuscation or malicious payload. ai
source-diff obfuscated-file:dist/et-BqjtNJGF.mjs AI (source-diff): Minified locale/i18n bundle; no obfuscation or malicious payload. ai
source-diff obfuscated-file:dist/en-DBWwj8s5.mjs AI (source-diff): Minified locale/i18n bundle; no obfuscation or malicious payload. ai
source-diff obfuscated-file:dist/processor-D9fqveOc.mjs AI (source-diff): Minified email processor bundle; content is inbound email matching logic, no malicious code. ai
source-diff obfuscated-file:dist/ticket-B9M2WoB1.mjs AI (source-diff): Minified ticket entity bundle; standard entity/field definitions. ai
source-diff obfuscated-file:dist/ticket-message-D8d9vmm_.mjs AI (source-diff): Minified ticket-message entity bundle; standard entity definitions. ai
source-diff obfuscated-file:dist/plugin-BS3w7gN8.mjs AI (source-diff): Minified plugin bundle from tsdown; content is Drizzle ORM schema + config logic, no malicious code. ai
source-diff obfuscated-file:dist/schema-BaZvAEvN.mjs AI (source-diff): Minified Drizzle ORM schema bundle; standard DB schema definitions. ai
source-diff obfuscated-file:dist/en-8iaiXBEz.mjs AI (source-diff): Minified i18n locale bundle from tsdown build; no obfuscation, just long single-line JSON. ai
source-diff obfuscated-file:dist/et-CmkJEv2L.mjs AI (source-diff): Minified i18n locale bundle (Estonian); same pattern as en bundle. ai
source-diff obfuscated-file:dist/ru-DxoWOcrR.mjs AI (source-diff): Minified i18n locale bundle (Russian); same pattern as en bundle. ai
source-diff obfuscated-file:dist/ticket-BefWjVa7.mjs AI (source-diff): Minified ticket entity definition with business logic; content is readable and benign. ai
source-diff obfuscated-file:dist/ticket-message-76hnYwYi.mjs AI (source-diff): Minified ticket-message entity; content is readable business logic, no malicious payload. ai
phantom-deps phantom-dep:@murumets-ee/media AI (phantom-deps): Same org scope; likely used via dynamic import in minified bundle. ai
source-diff obfuscated-file:dist/ticket-message-B5LNyFbG.mjs AI (source-diff): Minified ticket message entity logic; standard status-transition hooks, no malicious patterns. ai
source-diff obfuscated-file:dist/ticket-DmTZiyFC.mjs AI (source-diff): Minified ticket entity logic; content is standard ORM/entity framework code, no malicious patterns. ai
phantom-deps phantom-dep:@murumets-ee/storage AI (phantom-deps): Same org scope; likely used via dynamic import in minified bundle. ai
phantom-deps phantom-dep:sanitize-html AI (phantom-deps): Likely used at runtime via dynamic import or peer usage pattern within the org monorepo. ai
source-diff obfuscated-file:dist/schema-DzrrYuAs.mjs AI (source-diff): Minified Drizzle ORM schema definitions — standard build output. ai
source-diff obfuscated-file:dist/en-Lj8iDgCB.mjs AI (source-diff): i18n translation strings bundled as single-line JS object — not obfuscated. ai
source-diff obfuscated-file:dist/ticket-CKU43qGT.mjs AI (source-diff): Minified entity definition for tickets — standard build output. ai
source-diff obfuscated-file:dist/ticket-message-DQzkVcPv.mjs AI (source-diff): Minified entity definition for ticket messages — standard build output. ai
source-diff obfuscated-file:dist/et-BW9u_e05.mjs AI (source-diff): Estonian translation strings bundled as single-line JS object — not obfuscated. ai
source-diff obfuscated-file:dist/ru-C23l1j5A.mjs AI (source-diff): Russian translation strings bundled as single-line JS object — not obfuscated. ai
source-diff obfuscated-file:dist/plugin-CdT7Le6f.mjs AI (source-diff): Bundler output (tsdown chunk); content is readable business logic, not obfuscated malware. ai
source-diff obfuscated-file:dist/plugin-E4Xu6OBF.mjs AI (source-diff): Standard minified ESM bundle from tsdown build; content is readable ticketing business logic, no malicious patterns. ai
source-diff obfuscated-file:dist/plugin-DI-Dgahv.mjs AI (source-diff): Minified ESM bundle output from tsdown; content is readable domain logic, not obfuscated malware. ai
source-diff obfuscated-file:dist/plugin-CClgp1KS.mjs AI (source-diff): Minified bundler output (tsdown/rollup); code is readable domain logic, not obfuscated malware. ai
phantom-deps phantom-dep:@murumets-ee/db AI (phantom-deps): Same-org dep; likely imported transitively through bundled output rather than directly. ai
phantom-deps phantom-dep:@murumets-ee/queue AI (phantom-deps): Same-org dep; likely imported transitively through bundled output rather than directly. ai
source-diff obfuscated-file:dist/plugin-CRq2ZLZT.mjs AI (source-diff): tsdown-minified ESM bundle; samples show plain ticketing domain logic, no malicious patterns. ai
phantom-deps phantom-dep:@murumets-ee/logging AI (phantom-deps): Same-org dep; likely imported transitively through bundled output rather than directly. ai
source-diff obfuscated-file:dist/admin/routes.mjs AI (source-diff): tsdown-minified ESM bundle; samples show SQL query helpers, no malicious patterns. ai
phantom-deps phantom-dep:@murumets-ee/mail AI (phantom-deps): Same-org dep; likely imported transitively through bundled output rather than directly. ai

Versions (showing 51 of 79)

View all versions
Version Deps Published
0.36.0 17 / 5
0.35.1 17 / 5
0.35.0 17 / 5
0.34.1 17 / 5
0.34.0 17 / 5
0.33.0 16 / 5
0.32.3 16 / 5
0.32.2 16 / 5
0.32.1 16 / 5
0.32.0 16 / 5
0.31.0 16 / 5
0.30.0 16 / 5
0.29.2 16 / 5
0.29.1 16 / 5
0.29.0 16 / 5
0.28.0 16 / 5
0.27.0 16 / 5
0.26.3 16 / 5
0.26.2 16 / 5
0.26.1 16 / 5
0.26.0 16 / 5
0.25.0 16 / 5
0.24.1 16 / 5
0.24.0 16 / 5
0.23.2 16 / 5
0.23.1 16 / 5
0.23.0 16 / 5
0.22.1 16 / 5
0.22.0 16 / 5
0.21.1 16 / 5
0.21.0 16 / 5
0.20.0 16 / 5
0.19.0 16 / 5
0.18.0 16 / 5
0.17.1 16 / 5
0.17.0 16 / 5
0.16.5 16 / 5
0.16.4 16 / 5
0.16.3 16 / 5
0.16.2 16 / 5
0.16.1 16 / 5
0.16.0 16 / 5
0.15.4 16 / 5
0.15.3 16 / 5
0.15.2 16 / 5
0.15.1 16 / 5
0.15.0 16 / 5
0.14.0 15 / 5
0.13.3 15 / 5
0.13.2 15 / 5
0.13.1 15 / 5

v0.36.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.