@onerjs/gui-editor
Gui Editor es6
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/babylon.guiEditor.js | AI (source-diff): Standard rollup UMD minified bundle for BabylonJS GUI Editor; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/babylon.guiEditor.max.js | AI (source-diff): Standard rollup UMD minified bundle for BabylonJS GUI Editor; not obfuscated malware. | ai | |
| source-diff | net-exec-file:dist/babylon.guiEditor.js | AI (source-diff): Network/exec pattern in a 3D engine GUI bundle is expected (dynamic module loading, React internals); no exfiltration payload visible. | ai | |
| source-diff | net-exec-file:dist/babylon.guiEditor.max.js | AI (source-diff): Same as babylon.guiEditor.js — standard BabylonJS bundle pattern. | ai | |
| source-diff | source-size-tripled | AI (source-diff): First version to include pre-built dist files; size increase is expected and benign. | ai |
Versions (showing 100 of 206)
| Version | Deps | Published |
|---|---|---|
| 8.54.1 | 0 / 4 | |
| 8.53.9 | 0 / 4 | |
| 8.53.8 | 0 / 4 | |
| 8.53.7 | 0 / 4 | |
| 8.53.6 | 0 / 4 | |
| 8.53.5 | 0 / 4 | |
| 8.53.4 | 0 / 4 | |
| 8.53.3 | 0 / 4 | |
| 8.53.2 | 0 / 4 | |
| 8.53.1 | 0 / 4 | |
| 8.52.9 | 0 / 4 | |
| 8.52.8 | 0 / 4 | |
| 8.52.7 | 0 / 4 | |
| 8.52.6 | 0 / 4 | |
| 8.52.5 | 0 / 4 | |
| 8.52.4 | 0 / 4 | |
| 8.52.3 | 0 / 4 | |
| 8.52.2 | 0 / 4 | |
| 8.52.1 | 0 / 4 | |
| 8.51.9 | 0 / 4 | |
| 8.51.8 | 0 / 4 | |
| 8.51.7 | 0 / 4 | |
| 8.51.6 | 0 / 4 | |
| 8.51.5 | 0 / 4 | |
| 8.51.4 | 0 / 4 | |
| 8.51.3 | 0 / 4 | |
| 8.51.2 | 0 / 4 | |
| 8.51.1 | 0 / 4 | |
| 8.50.9 | 0 / 4 | |
| 8.50.8 | 0 / 4 | |
| 8.50.7 | 0 / 4 | |
| 8.50.6 | 0 / 4 | |
| 8.50.5 | 0 / 4 | |
| 8.50.4 | 0 / 4 | |
| 8.50.3 | 0 / 4 | |
| 8.50.2 | 0 / 4 | |
| 8.50.1 | 0 / 4 | |
| 8.49.9 | 0 / 4 | |
| 8.49.8 | 0 / 4 | |
| 8.49.7 | 0 / 4 | |
| 8.49.6 | 0 / 4 | |
| 8.49.5 | 0 / 4 | |
| 8.49.4 | 0 / 4 | |
| 8.49.3 | 0 / 4 | |
| 8.49.2 | 0 / 4 | |
| 8.49.1 | 0 / 4 | |
| 8.48.9 | 0 / 4 | |
| 8.48.8 | 0 / 4 | |
| 8.48.7 | 0 / 4 | |
| 8.48.6 | 0 / 4 | |
| 8.48.5 | 0 / 4 | |
| 8.48.4 | 0 / 4 | |
| 8.48.3 | 0 / 4 | |
| 8.48.2 | 0 / 4 | |
| 8.48.1 | 0 / 4 | |
| 8.47.9 | 0 / 4 | |
| 8.47.8 | 0 / 4 | |
| 8.47.7 | 0 / 4 | |
| 8.47.6 | 0 / 4 | |
| 8.47.5 | 0 / 4 | |
| 8.47.4 | 0 / 4 | |
| 8.47.3 | 0 / 4 | |
| 8.47.2 | 0 / 4 | |
| 8.47.1 | 0 / 4 | |
| 8.46.9 | 0 / 4 | |
| 8.46.8 | 0 / 4 | |
| 8.46.6 | 0 / 4 | |
| 8.46.4 | 0 / 4 | |
| 8.46.3 | 0 / 4 | |
| 8.46.2 | 0 / 4 | |
| 8.46.1 | 0 / 4 | |
| 8.45.9 | 0 / 4 | |
| 8.45.8 | 0 / 4 | |
| 8.45.7 | 0 / 4 | |
| 8.45.6 | 0 / 4 | |
| 8.45.5 | 0 / 4 | |
| 8.45.4 | 0 / 4 | |
| 8.45.3 | 0 / 4 | |
| 8.45.2 | 0 / 4 | |
| 8.45.1 | 0 / 4 | |
| 8.44.9 | 0 / 4 | |
| 8.44.8 | 0 / 4 | |
| 8.44.7 | 0 / 4 | |
| 8.44.6 | 0 / 4 | |
| 8.44.5 | 0 / 4 | |
| 8.44.4 | 0 / 4 | |
| 8.44.3 | 0 / 4 | |
| 8.44.2 | 0 / 4 | |
| 8.44.1 | 0 / 4 | |
| 8.43.9 | 0 / 4 | |
| 8.43.8 | 0 / 4 | |
| 8.43.7 | 0 / 4 | |
| 8.43.6 | 0 / 4 | |
| 8.43.5 | 0 / 4 | |
| 8.43.4 | 0 / 4 | |
| 8.43.3 | 0 / 4 | |
| 8.43.2 | 0 / 4 | |
| 8.43.1 | 0 / 4 | |
| 8.42.9 | 0 / 4 | |
| 8.42.8 | 0 / 4 |
v8.54.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.53.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.53.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.53.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.53.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.45.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.45.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.45.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.44.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.44.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.44.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.44.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.44.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.44.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.44.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.44.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.44.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.43.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.43.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.43.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.43.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.43.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.43.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.43.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.43.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.43.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.42.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v8.42.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.