← Home

@openfin/core-web

`@openfin/core-web` enables interoperability and layouts within a web browser. It is intended to be used by both content and platform developers to create integrated experiences which leverage OpenFin's existing interoperability APIs.

51
Versions
SEE LICENSE IN LICENSE.md
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

openfincolinhuopenfinbrandonpierrebaizenoyangundaymichaelmcoatesalan15008imansurijohnmandia-openfinrdepenatgoc99wenjuncheharsimran.openfin.singhmichal-pichlinski-hereluiemiliolicui3936connormccaffertyopenfin-cichrishobsonexperoliangliu-hererichbrowne-openfinazizyokhzhi0209openfin-gavinoblargnewaz.sharifandy.westacottshahossaineugeneross-openfingouthamcopenfin-jeffsakibahmadmanamiuedaxyopenfinhannahmcmillensmocarskidavidcoxon-of__tomasz__galim.kaudinovife-dev1gallak-openfineheyderelliott.burrmjoslingyoge-openfinhina-khalidcrom83eoyewobiyongji.chenmarek_openfinjmransegnolaameet-openfinrutu-bmichalzzopenfin-johansandrewche3openfin-ci-ghuday.guntupallipvidhiache40ahkjeffersongarcia25tpatek17cezary_openfinoliviatarsinicknewman-herericardo.martini-here.io

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:out/main-30bbc5a4.js AI (source-diff): Rollup/webpack bundled build output, not true obfuscation. ai
source-diff obfuscated-file:out/main-9d945837.js AI (source-diff): Bundled build output (esm variant), not obfuscation. ai
source-diff obfuscated-file:out/main-5e8d4735.js AI (source-diff): Bundled build output, not obfuscation. ai
source-diff obfuscated-file:out/main-41d8717e.js AI (source-diff): Bundled build output (cjs variant), not obfuscation. ai
source-diff obfuscated-file:out/main-8d998098.js AI (source-diff): Bundled rollup/webpack output, not obfuscation; standard OpenFin API client code. ai
source-diff obfuscated-file:out/main-cd937569.js AI (source-diff): Bundled build output, same pattern as sibling files. ai
source-diff obfuscated-file:out/main-ad508158.js AI (source-diff): Bundled build output, same pattern as sibling files. ai
source-diff obfuscated-file:out/main-af3abb8a.js AI (source-diff): Bundled build output, same pattern as sibling files. ai
source-diff obfuscated-file:out/main-60614b5a.js AI (source-diff): Rollup/webpack bundled output, not obfuscation; standard deps only. ai
source-diff obfuscated-file:out/main-f25611cb.js AI (source-diff): Bundled build artifact, no malicious behavior in sample. ai
source-diff obfuscated-file:out/main-e5c65253.js AI (source-diff): Bundled build artifact, ESM chunk mirroring the CJS main file. ai
source-diff obfuscated-file:out/main-7b9cc605.js AI (source-diff): Bundled build artifact from official OpenFin monorepo build. ai
source-diff obfuscated-file:out/main-0f090974.js AI (source-diff): Bundled build output (rollup/webpack), not true obfuscation; no malicious behavior. ai
source-diff obfuscated-file:out/main-972cf0ff.js AI (source-diff): Bundled build output, standard OpenFin SDK code. ai
source-diff obfuscated-file:out/main-bd5d383b.js AI (source-diff): Bundled ESM build output, matches sibling CJS bundle content. ai
source-diff obfuscated-file:out/main-e954e3dc.js AI (source-diff): Bundled build output shared across cjs/esm variants of the SDK. ai
source-diff obfuscated-file:out/main-e6143395.js AI (source-diff): Bundled build artifact; matches package's stated function. ai
source-diff obfuscated-file:out/main-8d9a2bed.js AI (source-diff): Bundled rollup/webpack output for internal API client, not true obfuscation. ai
source-diff obfuscated-file:out/main-8efaf87a.js AI (source-diff): Bundled build artifact; matches package's stated function. ai
source-diff obfuscated-file:out/main-fdefe348.js AI (source-diff): Bundled build artifact; matches package's stated function. ai
source-diff obfuscated-file:out/main-c6100ae2.js AI (source-diff): Minified bundler output, not true obfuscation; no malicious behavior found. ai
source-diff obfuscated-file:out/main-e348ef20.js AI (source-diff): Minified bundler output, not true obfuscation; no malicious behavior found. ai
source-diff obfuscated-file:out/main-2658a135.js AI (source-diff): Minified bundler output, not true obfuscation; no malicious behavior found. ai
source-diff obfuscated-file:out/main-03a07a2d.js AI (source-diff): Minified bundler output, not true obfuscation; no malicious behavior found. ai
source-diff obfuscated-file:out/main-1afa9b14.js AI (source-diff): Bundled rollup/webpack output, not true obfuscation. ai
source-diff obfuscated-file:out/main-6c35ba08.js AI (source-diff): Bundled rollup/webpack output, not true obfuscation. ai
source-diff obfuscated-file:out/main-8678af7c.js AI (source-diff): Bundled rollup/webpack output, not true obfuscation. ai
source-diff obfuscated-file:out/main-c410d888.js AI (source-diff): Bundled rollup/webpack output, not true obfuscation. ai
source-diff obfuscated-file:out/main-7d669882.js AI (source-diff): Bundled/minified rollup output, not obfuscation; matches stated build tooling. ai
source-diff obfuscated-file:out/main-671f3a42.js AI (source-diff): Bundled/minified rollup output, not obfuscation; matches stated build tooling. ai
source-diff obfuscated-file:out/main-a592d40f.js AI (source-diff): Bundled/minified rollup output, not obfuscation; matches stated build tooling. ai
source-diff obfuscated-file:out/main-d72000f6.js AI (source-diff): Bundled/minified rollup output, not obfuscation; matches stated build tooling. ai
source-diff obfuscated-file:out/main-34aa7526.js AI (source-diff): Bundled build output, benign RPC/channel code. ai
source-diff obfuscated-file:out/main-be3fc9ba.js AI (source-diff): Bundled build output, benign DOM observer helpers. ai
source-diff obfuscated-file:out/main-9076f89c.js AI (source-diff): Bundled ESM build output, benign. ai
source-diff obfuscated-file:out/main-2e0b82f6.js AI (source-diff): Bundled rollup/webpack output, matches build scripts; no malicious behavior found. ai
source-diff obfuscated-file:out/main-2eb92ec4.js AI (source-diff): Bundled rollup/webpack output for OpenFin's build pipeline, not true obfuscation. ai
provenance publisher-changed AI (provenance): CI/CD publisher change is a provenance improvement, not a compromise indicator. ai
source-diff obfuscated-file:out/main-daf96ed0.js AI (source-diff): Bundled rollup/webpack output for OpenFin's build pipeline, not true obfuscation. ai
source-diff obfuscated-file:out/main-755d2539.js AI (source-diff): Bundled rollup/webpack output for OpenFin's build pipeline, not true obfuscation. ai
source-diff obfuscated-file:out/main-1839a1bb.js AI (source-diff): Bundled rollup/webpack output for OpenFin's build pipeline, not true obfuscation. ai
source-diff obfuscated-file:out/main-ec7d5bee.js AI (source-diff): Standard minified rollup/webpack bundle, no malicious behavior present. ai
publish-pattern new-deps-added AI (publish-pattern): he and es-toolkit are established, well-known utility libs replacing lodash/buffer. ai
source-diff obfuscated-file:out/main-a3753f75.js AI (source-diff): Standard minified rollup/webpack bundle, no malicious behavior present. ai
source-diff obfuscated-file:out/main-88cdb426.js AI (source-diff): Standard minified rollup/webpack bundle, no malicious behavior present. ai
source-diff obfuscated-file:out/main-576f1c23.js AI (source-diff): Standard minified rollup/webpack bundle, no malicious behavior present. ai
source-diff obfuscated-file:out/main-6dedbd4a.js AI (source-diff): Bundled rollup/webpack output, not obfuscation; matches package build scripts. ai
source-diff obfuscated-file:out/main-c7ed4ef3.js AI (source-diff): Bundled rollup/webpack output, not obfuscation; matches package build scripts. ai
source-diff obfuscated-file:out/main-ac1953f1.js AI (source-diff): Bundled rollup/webpack output, not obfuscation; matches package build scripts. ai
source-diff obfuscated-file:out/main-a727ca35.js AI (source-diff): Bundled rollup/webpack output, not obfuscation; matches package build scripts. ai
source-diff obfuscated-file:out/main-590a5fa8.js AI (source-diff): Bundled build output, ESM chunk referencing own modules; no malicious behavior. ai
source-diff obfuscated-file:out/main-7f6571fb.js AI (source-diff): CJS bundle counterpart of same benign module. ai
source-diff obfuscated-file:out/main-5ed77c4f.js AI (source-diff): Bundled build output; benign DOM/title observer logic. ai
source-diff obfuscated-file:out/main-2fe4599c.js AI (source-diff): Bundled build output (rollup/webpack), not obfuscation; matches package's stated build scripts. ai
source-diff obfuscated-file:out/main-89c89c09.js AI (source-diff): Bundled build output matching declared rollup config. ai
source-diff obfuscated-file:out/main-06370bb3.js AI (source-diff): Bundled rollup/webpack output, not true obfuscation; no malicious behavior. ai
source-diff obfuscated-file:out/main-f27dd508.js AI (source-diff): Bundled build output matching declared rollup config. ai
source-diff obfuscated-file:out/main-7e1be1d9.js AI (source-diff): Bundled build output matching declared rollup config. ai
source-diff obfuscated-file:out/main-19fede95.js AI (source-diff): Bundled rollup/webpack output, not true obfuscation. ai
source-diff obfuscated-file:out/main-8e8868bc.js AI (source-diff): Bundled rollup/webpack output, not true obfuscation. ai
source-diff obfuscated-file:out/main-3d81285c.js AI (source-diff): Bundled rollup/webpack output, not true obfuscation. ai
source-diff obfuscated-file:out/main-33eb03f7.js AI (source-diff): Bundled rollup/webpack output, not true obfuscation. ai
source-diff obfuscated-file:out/main-970b1eed.js AI (source-diff): Rollup bundle output; readable minified code with no obfuscation signatures. ai
source-diff obfuscated-file:out/main-c4076cc9.js AI (source-diff): Rollup bundle output; readable minified code with no obfuscation signatures. ai
source-diff obfuscated-file:out/main-822926d2.js AI (source-diff): Rollup bundle output; readable minified code with no obfuscation signatures. ai
source-diff obfuscated-file:out/main-05ce91d8.js AI (source-diff): Rollup bundle output; readable minified code with no obfuscation signatures. ai
source-diff obfuscated-file:out/main-67fa3a76.js AI (source-diff): Rollup/webpack minified build output, not obfuscation. Stable for this package. ai
source-diff obfuscated-file:out/main-a5c960a2.js AI (source-diff): Rollup/webpack minified build output, not obfuscation. Stable for this package. ai
source-diff obfuscated-file:out/main-ca9d3d7f.js AI (source-diff): Rollup/webpack minified build output, not obfuscation. Stable for this package. ai
source-diff obfuscated-file:out/main-23089112.js AI (source-diff): Rollup/webpack minified build output, not obfuscation. Stable for this package. ai
source-diff obfuscated-file:out/main-572d2b0c.js AI (source-diff): Rollup/webpack bundle output; readable source logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-e7bfc245.js AI (source-diff): Rollup/webpack bundle output; readable source logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-b3ce3004.js AI (source-diff): Rollup/webpack bundle output; readable source logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-ba8d190f.js AI (source-diff): Rollup/webpack bundle output; readable source logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-1618841e.js AI (source-diff): Rollup/webpack bundle output; readable ES module code with no malicious behavior. ai
source-diff obfuscated-file:out/main-cdcbb00d.js AI (source-diff): Rollup/webpack bundle output; readable ES module code with no malicious behavior. ai
source-diff obfuscated-file:out/main-c2c12618.js AI (source-diff): Rollup/webpack bundle output; readable ES module code with no malicious behavior. ai
source-diff obfuscated-file:out/main-a4d0a766.js AI (source-diff): Rollup/webpack bundle output; readable ES module code with no malicious behavior. ai
source-diff obfuscated-file:out/main-041fc089.js AI (source-diff): Standard rollup minified bundle output; no obfuscation patterns present. ai
source-diff obfuscated-file:out/main-c8e93453.js AI (source-diff): Standard rollup minified bundle output; no obfuscation patterns present. ai
source-diff obfuscated-file:out/main-bcc810cb.js AI (source-diff): Standard rollup minified bundle output; no obfuscation patterns present. ai
source-diff obfuscated-file:out/main-7b7269ce.js AI (source-diff): Standard rollup minified bundle output; no obfuscation patterns present. ai
source-diff obfuscated-file:out/main-e9ec2087.js AI (source-diff): Rollup/webpack minified bundle output, not true obfuscation; stable pattern for this package. ai
source-diff obfuscated-file:out/main-bb89c88e.js AI (source-diff): Rollup/webpack minified bundle output, not true obfuscation; stable pattern for this package. ai
source-diff obfuscated-file:out/main-7aeceb84.js AI (source-diff): Rollup/webpack minified bundle output, not true obfuscation; stable pattern for this package. ai
source-diff obfuscated-file:out/main-48cf5e4c.js AI (source-diff): Rollup/webpack minified bundle output, not true obfuscation; stable pattern for this package. ai
source-diff obfuscated-file:out/main-387bbb8e.js AI (source-diff): Rollup/webpack minified build output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-cd677b5e.js AI (source-diff): Rollup/webpack minified build output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-ad6ceb01.js AI (source-diff): Rollup/webpack minified build output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-53ef6651.js AI (source-diff): Rollup/webpack minified build output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-4838ea45.js AI (source-diff): Bundled rollup output; readable source patterns, no malicious behavior. ai
source-diff obfuscated-file:out/main-ef27e0ca.js AI (source-diff): Bundled rollup output; readable source patterns, no malicious behavior. ai
source-diff obfuscated-file:out/main-a788c675.js AI (source-diff): Bundled rollup output; readable source patterns, no malicious behavior. ai
source-diff obfuscated-file:out/main-855fe4da.js AI (source-diff): Bundled rollup output; readable source patterns, no malicious behavior. ai
source-diff obfuscated-file:out/main-2661d184.js AI (source-diff): Standard rollup/webpack minified bundle output; no true obfuscation patterns present. ai
source-diff obfuscated-file:out/main-f87bec84.js AI (source-diff): Standard rollup/webpack minified bundle output; no true obfuscation patterns present. ai
source-diff obfuscated-file:out/main-bfe2a488.js AI (source-diff): Standard rollup/webpack minified bundle output; no true obfuscation patterns present. ai
source-diff obfuscated-file:out/main-5740086a.js AI (source-diff): Standard rollup/webpack minified bundle output; no true obfuscation patterns present. ai
source-diff obfuscated-file:out/main-6b809c16.js AI (source-diff): Rollup/webpack minified build output; code is readable OpenFin API logic with no malicious behavior. ai
source-diff obfuscated-file:out/main-b2580f46.js AI (source-diff): Rollup/webpack minified build output; code is readable OpenFin API logic with no malicious behavior. ai
source-diff obfuscated-file:out/main-f0110e68.js AI (source-diff): Rollup/webpack minified build output; code is readable OpenFin API logic with no malicious behavior. ai
source-diff obfuscated-file:out/main-10eade2a.js AI (source-diff): Rollup/webpack minified build output; code is readable OpenFin API logic with no malicious behavior. ai
source-diff obfuscated-file:out/main-16483f61.js AI (source-diff): Minified rollup bundle output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-d8a9a69b.js AI (source-diff): Minified rollup bundle output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-56445c26.js AI (source-diff): Minified rollup bundle output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-0b7df1ac.js AI (source-diff): Minified rollup bundle output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-cea87037.js AI (source-diff): Standard Rollup/webpack minified build output; no true obfuscation signatures present. ai
source-diff obfuscated-file:out/main-b458febc.js AI (source-diff): Standard Rollup/webpack minified build output; no true obfuscation signatures present. ai
source-diff obfuscated-file:out/main-4c59046e.js AI (source-diff): Standard Rollup/webpack minified build output; no true obfuscation signatures present. ai
source-diff obfuscated-file:out/main-48ec2e01.js AI (source-diff): Standard Rollup/webpack minified build output; no true obfuscation signatures present. ai
source-diff obfuscated-file:out/main-d32566fe.js AI (source-diff): Same minified bundle pattern; no obfuscation indicators beyond line length. ai
source-diff obfuscated-file:out/main-f7645d6a.js AI (source-diff): CJS variant of the same minified bundle; no hostile behavior. ai
source-diff obfuscated-file:out/main-e7ac5950.js AI (source-diff): CJS variant of the same minified bundle; no hostile behavior. ai
source-diff obfuscated-file:out/main-83fed53a.js AI (source-diff): Rollup/webpack minified bundle output; readable class names and known deps confirm no true obfuscation. ai
source-diff obfuscated-file:out/main-d889e7ec.js AI (source-diff): Rollup/webpack bundle output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-740b84b4.js AI (source-diff): Rollup/webpack bundle output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-844802ee.js AI (source-diff): Rollup/webpack bundle output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-f2b22162.js AI (source-diff): Rollup/webpack bundle output; readable domain logic, no malicious behavior. ai
source-diff obfuscated-file:out/main-49d8c2e7.js AI (source-diff): Minified rollup/webpack build output; no true obfuscation patterns present. ai
source-diff obfuscated-file:out/main-e13408a7.js AI (source-diff): Minified rollup/webpack build output; no true obfuscation patterns present. ai
source-diff obfuscated-file:out/main-3d9f6d6e.js AI (source-diff): Minified rollup/webpack build output; no true obfuscation patterns present. ai
source-diff obfuscated-file:out/main-01e3ac68.js AI (source-diff): Minified rollup/webpack build output; no true obfuscation patterns present. ai
source-diff obfuscated-file:out/main-6c4eaf6f.js AI (source-diff): Rollup/webpack bundle output; readable code with known deps, no obfuscation indicators. ai
source-diff obfuscated-file:out/main-21f92613.js AI (source-diff): Rollup/webpack bundle output; readable code with known deps, no obfuscation indicators. ai
source-diff obfuscated-file:out/main-275fc39f.js AI (source-diff): Rollup/webpack bundle output; readable code with known deps, no obfuscation indicators. ai
source-diff obfuscated-file:out/main-5e1f01c0.js AI (source-diff): Rollup/webpack bundle output; readable code with known deps, no obfuscation indicators. ai
source-diff obfuscated-file:out/main-045661e2.js AI (source-diff): Rollup/webpack bundle output; readable code with known deps, no malicious behavior. ai
source-diff obfuscated-file:out/main-f192ea26.js AI (source-diff): Rollup/webpack bundle output; readable code with known deps, no malicious behavior. ai
source-diff obfuscated-file:out/main-8ae9383d.js AI (source-diff): Rollup/webpack bundle output; readable code with known deps, no malicious behavior. ai
source-diff obfuscated-file:out/main-304b6f74.js AI (source-diff): Rollup/webpack bundle output; readable code with known deps, no malicious behavior. ai
source-diff obfuscated-file:out/main-afdea57a.js AI (source-diff): Rollup CJS bundle output; minified, not obfuscated. ai
source-diff obfuscated-file:out/main-f6fa213b.js AI (source-diff): Rollup ESM shared chunk; minified, not obfuscated. ai
source-diff obfuscated-file:out/main-e5f883a3.js AI (source-diff): Rollup CJS shared chunk; minified, not obfuscated. ai
source-diff obfuscated-file:out/main-760ebaa9.js AI (source-diff): Rollup ESM bundle output; minified, not obfuscated. ai
source-diff obfuscated-file:out/main-7dac2306.js AI (source-diff): Standard rollup/webpack minified build output; readable logic, no obfuscation indicators. ai
source-diff obfuscated-file:out/main-d05715ad.js AI (source-diff): Standard rollup/webpack minified build output; readable logic, no obfuscation indicators. ai
source-diff obfuscated-file:out/main-b6264800.js AI (source-diff): Standard rollup/webpack minified build output; readable logic, no obfuscation indicators. ai
source-diff obfuscated-file:out/main-10ade932.js AI (source-diff): Standard rollup/webpack minified build output; readable logic, no obfuscation indicators. ai
source-diff obfuscated-file:out/main-0c83b278.js AI (source-diff): Standard Rollup bundle output; content matches package purpose with no malicious patterns. ai
source-diff obfuscated-file:out/main-87daa8ae.js AI (source-diff): Standard Rollup CJS bundle output; content matches package purpose with no malicious patterns. ai
source-diff obfuscated-file:out/main-1a0ee541.js AI (source-diff): Standard Rollup CJS bundle output; content matches package purpose with no malicious patterns. ai
source-diff obfuscated-file:out/main-ff265f3a.js AI (source-diff): Standard Rollup ESM bundle output; content matches package purpose with no malicious patterns. ai
source-diff obfuscated-file:out/main-d372b14e.js AI (source-diff): Standard Rollup bundle output for OpenFin SDK; minified but not obfuscated. ai
source-diff obfuscated-file:out/main-3ef007af.js AI (source-diff): Standard Rollup bundle output for OpenFin SDK; minified but not obfuscated. ai
source-diff obfuscated-file:out/main-9a69ccb4.js AI (source-diff): Standard Rollup bundle output for OpenFin SDK; minified but not obfuscated. ai
source-diff obfuscated-file:out/main-d54536ac.js AI (source-diff): Standard Rollup bundle output for OpenFin SDK; minified but not obfuscated. ai
source-diff obfuscated-file:out/main-0aceee5b.js AI (source-diff): Standard minified Rollup build output for OpenFin SDK; consistent pattern across all versions. ai
source-diff obfuscated-file:out/main-3ad4016a.js AI (source-diff): Standard minified Rollup build output for OpenFin SDK; consistent pattern across all versions. ai
source-diff obfuscated-file:out/main-81f8279f.js AI (source-diff): Standard minified Rollup build output for OpenFin SDK; consistent pattern across all versions. ai
source-diff obfuscated-file:out/main-143899ee.js AI (source-diff): Standard minified Rollup build output for OpenFin SDK; consistent pattern across all versions. ai
source-diff obfuscated-file:out/main-8ba1e799.js AI (source-diff): Standard Rollup minified build output for an established OpenFin SDK; not obfuscated. ai
source-diff obfuscated-file:out/main-b4d0bf11.js AI (source-diff): Standard Rollup minified build output for an established OpenFin SDK; not obfuscated. ai
source-diff obfuscated-file:out/main-a2142e47.js AI (source-diff): Standard Rollup minified build output for an established OpenFin SDK; not obfuscated. ai
source-diff obfuscated-file:out/main-0196f681.js AI (source-diff): Standard Rollup minified build output for an established OpenFin SDK; not obfuscated. ai
source-diff obfuscated-file:out/main-7e2f06e0.js AI (source-diff): Standard Rollup/webpack minified bundle output for this package; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-ef2e5c76.js AI (source-diff): Standard Rollup/webpack minified bundle output for this package; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-d23e2c6e.js AI (source-diff): Standard Rollup/webpack minified bundle output for this package; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-473b7f24.js AI (source-diff): Standard Rollup/webpack minified bundle output for this package; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-0c3a88c6.js AI (source-diff): Standard Rollup minified bundle output for this package; not obfuscated. ai
source-diff obfuscated-file:out/main-7af44c5f.js AI (source-diff): Standard Rollup minified bundle output for this package; not obfuscated. ai
source-diff obfuscated-file:out/main-15681bf0.js AI (source-diff): Standard Rollup minified bundle output for this package; not obfuscated. ai
source-diff obfuscated-file:out/main-0896ef54.js AI (source-diff): Standard Rollup minified bundle output for this package; not obfuscated. ai
source-diff obfuscated-file:out/main-7865c494.js AI (source-diff): Standard minified Rollup bundle output for this SDK; no malicious patterns in samples. ai
source-diff obfuscated-file:out/main-fde2c8ff.js AI (source-diff): Standard minified Rollup bundle output for this SDK; no malicious patterns in samples. ai
source-diff obfuscated-file:out/main-e4d4f7e0.js AI (source-diff): Standard minified Rollup bundle output for this SDK; no malicious patterns in samples. ai
source-diff obfuscated-file:out/main-e25afcb4.js AI (source-diff): Standard minified Rollup bundle output for this SDK; no malicious patterns in samples. ai
source-diff obfuscated-file:out/main-b472bd1e.js AI (source-diff): Standard Rollup minified bundle output; code is readable OpenFin API logic, not obfuscated malware. ai
source-diff obfuscated-file:out/main-4c90b810.js AI (source-diff): Standard Rollup minified bundle output; code is readable OpenFin API logic, not obfuscated malware. ai
source-diff obfuscated-file:out/main-b1d77a21.js AI (source-diff): Standard Rollup minified bundle output; code is readable OpenFin API logic, not obfuscated malware. ai
source-diff obfuscated-file:out/main-defa1e15.js AI (source-diff): Standard Rollup minified bundle output; code is readable OpenFin API logic, not obfuscated malware. ai
source-diff obfuscated-file:out/main-23c64106.js AI (source-diff): Standard Rollup build chunk output; readable minified JS with OpenFin API patterns, not malicious obfuscation. ai
source-diff obfuscated-file:out/main-e4dce1fc.js AI (source-diff): Standard Rollup build chunk output; readable minified JS with OpenFin API patterns, not malicious obfuscation. ai
source-diff obfuscated-file:out/main-d77a301b.js AI (source-diff): Standard Rollup build chunk output; readable minified JS with OpenFin API patterns, not malicious obfuscation. ai
source-diff obfuscated-file:out/main-2e3dae27.js AI (source-diff): Standard Rollup build chunk output; readable minified JS with OpenFin API patterns, not malicious obfuscation. ai
source-diff obfuscated-file:out/main-7e26479e.js AI (source-diff): Standard Rollup minified build output for an established OpenFin SDK; not obfuscated. ai
source-diff obfuscated-file:out/main-583cbb3f.js AI (source-diff): Standard Rollup minified build output for an established OpenFin SDK; not obfuscated. ai
source-diff obfuscated-file:out/main-422d7a20.js AI (source-diff): Standard Rollup minified build output for an established OpenFin SDK; not obfuscated. ai
source-diff obfuscated-file:out/main-00627afd.js AI (source-diff): Standard Rollup minified build output for an established OpenFin SDK; not obfuscated. ai
source-diff obfuscated-file:out/main-03a2dfaa.js AI (source-diff): Standard Rollup minified build output for this SDK; pattern is stable across versions. ai
source-diff obfuscated-file:out/main-b7bcea28.js AI (source-diff): Standard Rollup minified build output for this SDK; pattern is stable across versions. ai
source-diff obfuscated-file:out/main-d642e034.js AI (source-diff): Standard Rollup minified build output for this SDK; pattern is stable across versions. ai
source-diff obfuscated-file:out/main-9afdff92.js AI (source-diff): Standard Rollup minified build output for this SDK; pattern is stable across versions. ai
source-diff obfuscated-file:out/main-95e1c80c.js AI (source-diff): Minified Rollup bundle output; standard for this package's build pipeline across all versions. ai
source-diff obfuscated-file:out/main-ab65637d.js AI (source-diff): Minified Rollup bundle output; standard for this package's build pipeline across all versions. ai
source-diff obfuscated-file:out/main-182afed2.js AI (source-diff): Minified Rollup bundle output; standard for this package's build pipeline across all versions. ai
source-diff obfuscated-file:out/main-102e246e.js AI (source-diff): Minified Rollup bundle output; standard for this package's build pipeline across all versions. ai
source-diff obfuscated-file:out/main-fc7d58c0.js AI (source-diff): Standard Rollup minified output for this package; not obfuscation. ai
source-diff obfuscated-file:out/main-63d950ea.js AI (source-diff): Standard Rollup minified output for this package; not obfuscation. ai
source-diff obfuscated-file:out/main-5d8b578b.js AI (source-diff): Standard Rollup minified output for this package; not obfuscation. ai
source-diff obfuscated-file:out/main-995f7276.js AI (source-diff): Standard Rollup minified output for this package; not obfuscation. ai
source-diff obfuscated-file:out/main-14e8828f.js AI (source-diff): Standard Rollup minified build output for this package; not obfuscated. ai
source-diff obfuscated-file:out/main-fd1b2b20.js AI (source-diff): Standard Rollup minified build output for this package; not obfuscated. ai
source-diff obfuscated-file:out/main-987a0ad6.js AI (source-diff): Standard Rollup minified build output for this package; not obfuscated. ai
source-diff obfuscated-file:out/main-87a91d10.js AI (source-diff): Standard Rollup minified build output for this package; not obfuscated. ai
source-diff obfuscated-file:out/main-4d818c51.js AI (source-diff): Standard Rollup minified build output for this package; not obfuscated malware. ai
source-diff obfuscated-file:out/main-ea4b39be.js AI (source-diff): Standard Rollup minified build output for this package; not obfuscated malware. ai
source-diff obfuscated-file:out/main-9b6398d1.js AI (source-diff): Standard Rollup minified build output for this package; not obfuscated malware. ai
source-diff obfuscated-file:out/main-241904a1.js AI (source-diff): Standard Rollup minified build output for this package; not obfuscated malware. ai
source-diff obfuscated-file:out/main-5dbd6c16.js AI (source-diff): Rollup-generated minified chunk; consistent with package's documented build pipeline. ai
source-diff obfuscated-file:out/main-857a6ee2.js AI (source-diff): Rollup-generated minified chunk; consistent with package's documented build pipeline. ai
source-diff obfuscated-file:out/main-a8e06509.js AI (source-diff): Rollup-generated minified chunk; consistent with package's documented build pipeline. ai
source-diff obfuscated-file:out/main-6dff1c7a.js AI (source-diff): Rollup-generated minified chunk; consistent with package's documented build pipeline. ai
source-diff obfuscated-file:out/main-87534039.js AI (source-diff): Standard Rollup minified build output for OpenFin SDK; not obfuscated, code is readable and uses known deps. ai
source-diff obfuscated-file:out/main-cdaba21c.js AI (source-diff): Standard Rollup minified build output for OpenFin SDK; not obfuscated, code is readable and uses known deps. ai
source-diff obfuscated-file:out/main-99bc6ad4.js AI (source-diff): Standard Rollup minified build output for OpenFin SDK; not obfuscated, code is readable and uses known deps. ai
source-diff obfuscated-file:out/main-172c400a.js AI (source-diff): Standard Rollup minified build output for OpenFin SDK; not obfuscated, code is readable and uses known deps. ai
source-diff obfuscated-file:out/main-b8707ada.js AI (source-diff): Standard minified Rollup bundle output; readable logic, no malicious patterns. Stable for this package. ai
source-diff obfuscated-file:out/main-cd2d270e.js AI (source-diff): Standard minified Rollup bundle output; readable logic, no malicious patterns. Stable for this package. ai
source-diff obfuscated-file:out/main-4df58399.js AI (source-diff): Standard minified Rollup bundle output; readable logic, no malicious patterns. Stable for this package. ai
source-diff obfuscated-file:out/main-1aab9d96.js AI (source-diff): Standard minified Rollup bundle output; readable logic, no malicious patterns. Stable for this package. ai
source-diff obfuscated-file:out/main-197e7a21.js AI (source-diff): Standard Rollup minified build output; readable identifiers, no malicious patterns. ai
source-diff obfuscated-file:out/main-eb6066e6.js AI (source-diff): Standard Rollup/webpack minified build output; no malicious patterns. ai
source-diff obfuscated-file:out/main-d88b62d0.js AI (source-diff): Standard Rollup/webpack minified build output; no malicious patterns. ai
source-diff obfuscated-file:out/main-9dffcbd3.js AI (source-diff): Standard Rollup/webpack minified build output; no malicious patterns. ai
source-diff obfuscated-file:out/main-64607de3.js AI (source-diff): Standard Rollup/webpack minified bundle output for this package; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-d41c92b3.js AI (source-diff): Standard Rollup/webpack minified bundle output for this package; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-7a785515.js AI (source-diff): Standard Rollup/webpack minified bundle output for this package; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-8dcf9a45.js AI (source-diff): Standard Rollup/webpack minified bundle output for this package; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-ccf02e5a.js AI (source-diff): Standard Rollup minified bundle output; consistent with this package's established build pattern. ai
source-diff obfuscated-file:out/main-de019a27.js AI (source-diff): Standard Rollup minified bundle output; consistent with this package's established build pattern. ai
source-diff obfuscated-file:out/main-3ffa83d1.js AI (source-diff): Standard Rollup minified bundle output; consistent with this package's established build pattern. ai
source-diff obfuscated-file:out/main-09ce97f0.js AI (source-diff): Standard Rollup minified bundle output; consistent with this package's established build pattern. ai
source-diff obfuscated-file:out/main-7432417d.js AI (source-diff): Rollup-minified CJS bundle; readable domain logic, stable pattern across versions. ai
source-diff obfuscated-file:out/main-d0830314.js AI (source-diff): Rollup-minified ESM chunk; stable pattern across versions. ai
source-diff obfuscated-file:out/main-f5f2dddb.js AI (source-diff): Rollup-minified ESM bundle; stable pattern across versions. ai
source-diff obfuscated-file:out/main-82d77a54.js AI (source-diff): Rollup-minified shared CJS chunk; stable pattern across versions. ai
source-diff obfuscated-file:out/main-1e4d6670.js AI (source-diff): Standard rollup minified output for this package; no malicious patterns in code. ai
source-diff obfuscated-file:out/main-f50d2a53.js AI (source-diff): Standard rollup minified output for this package; no malicious patterns in code. ai
source-diff obfuscated-file:out/main-d517e27e.js AI (source-diff): Standard rollup minified output for this package; no malicious patterns in code. ai
source-diff obfuscated-file:out/main-7861dca4.js AI (source-diff): Standard rollup minified output for this package; no malicious patterns in code. ai
source-diff obfuscated-file:out/main-23e24ea6.js AI (source-diff): Standard Rollup minified bundle for OpenFin SDK; no malicious patterns in code samples. ai
source-diff obfuscated-file:out/main-de2940cb.js AI (source-diff): Standard Rollup minified bundle for OpenFin SDK; no malicious patterns in code samples. ai
source-diff obfuscated-file:out/main-af6807af.js AI (source-diff): Standard Rollup minified bundle for OpenFin SDK; no malicious patterns in code samples. ai
source-diff obfuscated-file:out/main-a06c6c7a.js AI (source-diff): Standard Rollup minified bundle for OpenFin SDK; no malicious patterns in code samples. ai
source-diff obfuscated-file:out/main-27dad9ce.js AI (source-diff): Standard Rollup minified output; readable OpenFin API code, no malicious patterns. ai
source-diff obfuscated-file:out/main-f3beed88.js AI (source-diff): Standard Rollup minified output; readable OpenFin API code, no malicious patterns. ai
source-diff obfuscated-file:out/main-4c8ebbdd.js AI (source-diff): Standard Rollup minified output; readable OpenFin API code, no malicious patterns. ai
source-diff obfuscated-file:out/main-0c44c1a2.js AI (source-diff): Standard Rollup minified output; readable OpenFin API code, no malicious patterns. ai
source-diff obfuscated-file:out/main-73e354d2.js AI (source-diff): Standard Rollup minified bundle for this package; not obfuscation. ai
source-diff obfuscated-file:out/main-d11f56d5.js AI (source-diff): Standard Rollup minified bundle for this package; not obfuscation. ai
source-diff obfuscated-file:out/main-0d11699e.js AI (source-diff): Standard Rollup minified bundle for this package; not obfuscation. ai
source-diff obfuscated-file:out/main-38d8c102.js AI (source-diff): Standard Rollup minified bundle for this package; not obfuscation. ai
semgrep semgrep:eval-usage AI (semgrep): eval() calls are in webpack-bundled shared worker output; standard webpack devtool pattern for this package. ai
semgrep semgrep:new-function-constructor AI (semgrep): new Function() in webpack bundle output; consistent with webpack module federation/template patterns. ai
source-diff obfuscated-file:out/main-0ed2436e.js AI (source-diff): Minified Rollup bundle output; readable logic, known deps, no malicious patterns. Stable for this package. ai
source-diff obfuscated-file:out/main-7fa37f01.js AI (source-diff): Minified Rollup bundle output; readable logic, known deps, no malicious patterns. Stable for this package. ai
source-diff obfuscated-file:out/main-3425ccda.js AI (source-diff): Minified Rollup bundle output; readable logic, known deps, no malicious patterns. Stable for this package. ai
source-diff obfuscated-file:out/main-011882ce.js AI (source-diff): Minified Rollup bundle output; readable logic, known deps, no malicious patterns. Stable for this package. ai
source-diff obfuscated-file:out/main-8ff8f51f.js AI (source-diff): Standard rollup minified output for OpenFin SDK; CJS variant of same bundle. ai
source-diff obfuscated-file:out/main-efbd2043.js AI (source-diff): Standard rollup minified output for OpenFin SDK; CJS entry importing from sibling bundle. ai
source-diff obfuscated-file:out/main-9bf2e35c.js AI (source-diff): Standard rollup minified output for OpenFin SDK; ESM entry importing from sibling bundle. ai
source-diff obfuscated-file:out/main-3cd777a4.js AI (source-diff): Standard rollup minified output for OpenFin SDK; readable logic, known imports, no malicious indicators. ai
source-diff obfuscated-file:out/main-9b4b3ff9.js AI (source-diff): Standard minified Rollup bundle output; readable logic, known deps, no malicious patterns. ai
source-diff obfuscated-file:out/main-dfb5e558.js AI (source-diff): Standard minified Rollup bundle output; readable logic, known deps, no malicious patterns. ai
source-diff obfuscated-file:out/main-5e3f0044.js AI (source-diff): Standard minified Rollup bundle output; readable logic, known deps, no malicious patterns. ai
source-diff obfuscated-file:out/main-03022045.js AI (source-diff): Standard minified Rollup bundle output; readable logic, known deps, no malicious patterns. ai
source-diff obfuscated-file:out/main-70314dee.js AI (source-diff): Standard Rollup minified bundle for OpenFin SDK; no malicious patterns in code samples. ai
source-diff obfuscated-file:out/main-8f7b6de8.js AI (source-diff): Standard Rollup minified bundle for OpenFin SDK; no malicious patterns in code samples. ai
source-diff obfuscated-file:out/main-8e5ba594.js AI (source-diff): Standard Rollup minified bundle for OpenFin SDK; no malicious patterns in code samples. ai
source-diff obfuscated-file:out/main-841a9c82.js AI (source-diff): Standard Rollup minified bundle for OpenFin SDK; no malicious patterns in code samples. ai
source-diff obfuscated-file:out/main-beec5f60.js AI (source-diff): Minified rollup bundle output; standard for this package's build pipeline. ai
source-diff obfuscated-file:out/main-2294efc5.js AI (source-diff): Minified rollup bundle output; standard for this package's build pipeline. ai
source-diff obfuscated-file:out/main-84ea9ca0.js AI (source-diff): Minified rollup bundle output; standard for this package's build pipeline. ai
source-diff obfuscated-file:out/main-8ff45822.js AI (source-diff): Minified rollup bundle output; standard for this package's build pipeline. ai
source-diff obfuscated-file:out/main-9e2bb3a1.js AI (source-diff): Standard rollup/webpack minified bundle; same pattern as other out/ artifacts in this package. ai
source-diff obfuscated-file:out/main-cb8f42a4.js AI (source-diff): Standard rollup/webpack minified bundle; same pattern as other out/ artifacts in this package. ai
source-diff obfuscated-file:out/main-ae277080.js AI (source-diff): Standard rollup/webpack minified bundle; same pattern as other out/ artifacts in this package. ai
source-diff obfuscated-file:out/main-23020a63.js AI (source-diff): Standard rollup/webpack minified bundle for this SDK; readable logic visible in samples, no obfuscation. ai
source-diff obfuscated-file:out/main-8c3fcca0.js AI (source-diff): Standard Rollup minified bundle output for this SDK; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-a6dde251.js AI (source-diff): Standard Rollup minified bundle output for this SDK; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-9d01c834.js AI (source-diff): Standard Rollup minified bundle output for this SDK; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-6324bdec.js AI (source-diff): Standard Rollup minified bundle output for this SDK; not malicious obfuscation. ai
source-diff obfuscated-file:out/main-961e826d.js AI (source-diff): Standard rollup bundle output for OpenFin SDK; minification is expected across all versions. ai
source-diff obfuscated-file:out/main-0346bde1.js AI (source-diff): Standard rollup bundle output for OpenFin SDK; minification is expected across all versions. ai
source-diff obfuscated-file:out/main-41070dfd.js AI (source-diff): Standard rollup bundle output for OpenFin SDK; minification is expected across all versions. ai
source-diff obfuscated-file:out/main-70f7b86a.js AI (source-diff): Standard rollup bundle output for OpenFin SDK; minification is expected across all versions. ai
source-diff obfuscated-file:out/main-23119e91.js AI (source-diff): Rollup/webpack minified build output; standard for this OpenFin SDK package across all versions. ai
source-diff obfuscated-file:out/main-ed980f47.js AI (source-diff): Rollup/webpack minified build output; standard for this OpenFin SDK package across all versions. ai
source-diff obfuscated-file:out/main-b5e8c3a3.js AI (source-diff): Rollup/webpack minified build output; standard for this OpenFin SDK package across all versions. ai
source-diff obfuscated-file:out/main-81ff9931.js AI (source-diff): Rollup/webpack minified build output; standard for this OpenFin SDK package across all versions. ai
source-diff obfuscated-file:out/main-2bd69fed.js AI (source-diff): Standard rollup/webpack minified bundle output; consistent with this package's established build pattern. ai
phantom-deps phantom-dep:tslib AI (phantom-deps): tslib is a known implicit TypeScript runtime helper; phantom-dep false positive for this package. ai
phantom-deps phantom-dep:url AI (phantom-deps): url is a Node.js polyfill used transitively; phantom-dep false positive for this package. ai
source-diff obfuscated-file:out/main-a95f68ae.js AI (source-diff): Standard rollup/webpack minified bundle output; consistent with this package's established build pattern. ai
source-diff obfuscated-file:out/main-9aad5de7.js AI (source-diff): Standard rollup/webpack minified bundle output; consistent with this package's established build pattern. ai
source-diff obfuscated-file:out/main-100233ff.js AI (source-diff): Standard rollup/webpack minified bundle output; consistent with this package's established build pattern. ai
semgrep semgrep:api-obfuscation-reflect AI (semgrep): Fires in bundled rollup/webpack output; standard pattern for this package's build pipeline. ai

Versions (showing 51 of 578)

View all versions
Version Deps Published
0.46.39 6 / 0
0.46.37 6 / 0
0.46.36 6 / 0
0.46.35 6 / 0
0.46.34 6 / 0
0.46.33 6 / 0
0.46.32 6 / 0
0.46.29 6 / 0
0.46.28 6 / 0
0.46.27 6 / 0
0.46.26 6 / 0
0.46.25 6 / 0
0.46.24 6 / 0
0.46.23 6 / 0
0.46.22 6 / 0
0.46.21 6 / 0
0.46.20 6 / 0
0.46.19 6 / 0
0.46.18 6 / 0
0.46.17 6 / 0
0.46.14 6 / 0
0.46.13 6 / 0
0.46.9 6 / 0
0.46.8 6 / 0
0.46.7 6 / 0
0.46.6 6 / 0
0.46.5 6 / 0
0.46.3 6 / 0
0.46.2 6 / 0
0.46.1 6 / 0
0.46.0 6 / 0
0.45.102 6 / 0
0.45.101 6 / 0
0.45.100 6 / 0
0.45.99 6 / 0
0.45.98 6 / 0
0.45.97 6 / 0
0.45.96 6 / 0
0.45.95 6 / 0
0.45.94 6 / 0
0.45.92 6 / 0
0.45.91 6 / 0
0.45.90 6 / 0
0.45.89 6 / 0
0.45.88 6 / 0
0.45.87 6 / 0
0.45.86 6 / 0
0.45.85 6 / 0
0.45.84 6 / 0
0.45.83 6 / 0
0.45.82 6 / 0

v0.46.39

5 findings
HIGH New obfuscated file: out/main-671f3a42.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-7d669882.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-a592d40f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-d72000f6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.37

5 findings
HIGH New obfuscated file: out/main-1afa9b14.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-6c35ba08.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-8678af7c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-c410d888.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.36

5 findings
HIGH New obfuscated file: out/main-30bbc5a4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-41d8717e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-5e8d4735.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-9d945837.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.35

5 findings
HIGH New obfuscated file: out/main-8d9a2bed.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-8efaf87a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-e6143395.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-fdefe348.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.34

5 findings
HIGH New obfuscated file: out/main-03a07a2d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-2658a135.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-c6100ae2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-e348ef20.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.33

5 findings
HIGH New obfuscated file: out/main-8d998098.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-ad508158.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-af3abb8a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-cd937569.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.32

5 findings
HIGH New obfuscated file: out/main-2e0b82f6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-34aa7526.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-9076f89c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-be3fc9ba.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.29

6 findings
HIGH Publisher changed: openfin-ci → GitHub Actions (on 2026-07-09) provenance

This version was published by a different npm account than previous versions on 2026-07-09. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: out/main-576f1c23.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-88cdb426.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-a3753f75.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-ec7d5bee.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.28

5 findings
HIGH New obfuscated file: out/main-2fe4599c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-590a5fa8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-5ed77c4f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-7f6571fb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.27

5 findings
HIGH New obfuscated file: out/main-06370bb3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-7e1be1d9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-89c89c09.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-f27dd508.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.26

6 findings
HIGH Publisher changed: GitLab CI/CD → GitHub Actions (on 2026-07-03) provenance

This version was published by a different npm account than previous versions on 2026-07-03. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: out/main-041fc089.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-7b7269ce.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-bcc810cb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-c8e93453.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.25

5 findings
HIGH New obfuscated file: out/main-6dedbd4a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-a727ca35.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-ac1953f1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-c7ed4ef3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.24

6 findings
HIGH Publisher changed: GitLab CI/CD → GitHub Actions (on 2026-07-01) provenance

This version was published by a different npm account than previous versions on 2026-07-01. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: out/main-2661d184.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-5740086a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-bfe2a488.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-f87bec84.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.23

6 findings
HIGH Publisher changed: GitLab CI/CD → GitHub Actions (on 2026-06-30) provenance

This version was published by a different npm account than previous versions on 2026-06-30. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: out/main-10eade2a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-6b809c16.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-b2580f46.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-f0110e68.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.46.22

6 findings
HIGH Publisher changed: GitLab CI/CD → GitHub Actions (on 2026-06-29) provenance

This version was published by a different npm account than previous versions on 2026-06-29. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: out/main-83fed53a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-d32566fe.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-e7ac5950.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-f7645d6a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.45.102

5 findings
HIGH New obfuscated file: out/main-0f090974.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-972cf0ff.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-bd5d383b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-e954e3dc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.45.101

5 findings
HIGH New obfuscated file: out/main-60614b5a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-7b9cc605.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-e5c65253.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-f25611cb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.45.100

6 findings
HIGH Publisher changed: GitLab CI/CD → GitHub Actions (on 2026-07-03) provenance

This version was published by a different npm account than previous versions on 2026-07-03. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: out/main-387bbb8e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-53ef6651.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-ad6ceb01.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-cd677b5e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.45.99

6 findings
HIGH Publisher changed: GitLab CI/CD → GitHub Actions (on 2026-07-02) provenance

This version was published by a different npm account than previous versions on 2026-07-02. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: out/main-48cf5e4c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-7aeceb84.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-bb89c88e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-e9ec2087.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.45.98

6 findings
HIGH Publisher changed: GitLab CI/CD → GitHub Actions (on 2026-07-01) provenance

This version was published by a different npm account than previous versions on 2026-07-01. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: out/main-4838ea45.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-855fe4da.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-a788c675.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-ef27e0ca.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.45.97

6 findings
HIGH Publisher changed: GitLab CI/CD → GitHub Actions (on 2026-06-29) provenance

This version was published by a different npm account than previous versions on 2026-06-29. This could indicate a legitimate maintainer transition or an account compromise.

HIGH New obfuscated file: out/main-48ec2e01.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-4c59046e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-b458febc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: out/main-cea87037.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.