← Home

@opendaw/studio-core

npm
51
Versions
LGPL-3.0-or-later
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

andremichelle

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/offline-engine.js AI (source-diff): Minified bundler output, not true obfuscation; part of documented build. ai
provenance no-provenance AI (provenance): Publisher has 181 approved packages without provenance; consistent pattern. ai
phantom-deps phantom-dep:@opendaw/nam-wasm AI (phantom-deps): Same-org dep; likely used indirectly or conditionally within the package. ai
bogus-package bogus-package AI (bogus-package): Monorepo sub-package; sparse metadata is consistent across all @opendaw/* packages, not a spam indicator. ai
npm-metadata no-description AI (npm-metadata): Intentionally minimal metadata across the @opendaw monorepo; stable false positive. ai

Versions (showing 51 of 131)

View all versions
Version Deps Published
0.1.3 16 / 7
0.1.2 16 / 7
0.1.1 16 / 7
0.1.0 16 / 7
0.0.156 16 / 7
0.0.155 16 / 7
0.0.154 16 / 7
0.0.153 16 / 7
0.0.152 16 / 7
0.0.151 16 / 7
0.0.150 16 / 7
0.0.149 16 / 7
0.0.148 16 / 7
0.0.147 16 / 7
0.0.146 16 / 7
0.0.145 16 / 7
0.0.144 16 / 7
0.0.143 16 / 7
0.0.142 16 / 7
0.0.141 16 / 7
0.0.140 16 / 7
0.0.139 16 / 7
0.0.138 16 / 7
0.0.137 16 / 7
0.0.136 16 / 7
0.0.135 16 / 7
0.0.134 16 / 7
0.0.133 16 / 7
0.0.132 16 / 7
0.0.131 16 / 7
0.0.130 15 / 7
0.0.129 15 / 7
0.0.128 15 / 7
0.0.127 15 / 7
0.0.126 15 / 7
0.0.125 15 / 7
0.0.124 15 / 7
0.0.123 15 / 7
0.0.122 15 / 7
0.0.121 15 / 7
0.0.120 15 / 7
0.0.119 15 / 7
0.0.118 15 / 7
0.0.117 15 / 7
0.0.116 15 / 7
0.0.115 15 / 7
0.0.114 15 / 7
0.0.113 15 / 7
0.0.112 15 / 7
0.0.111 15 / 7
0.0.110 15 / 7

v0.1.3

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.2

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.1

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.0

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.156

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.155

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.154

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.134

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.127

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.126

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.125

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.124

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.123

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.122

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.121

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.120

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.119

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.118

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.117

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.116

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.115

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.114

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.113

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.112

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.111

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.0.110

2 findings
HIGH New obfuscated file: dist/offline-engine.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.