@openmrs/esm-form-entry-app
Angular form engine for O3
7
Versions
MPL-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
mogoodrichopenmrs-botrkorytkowskidjazayerimksdbrandonesjdickbmamlindkibetdennisforthewinibacher
Keywords
openmrs
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/8512.2e14258a3c327421.js | AI (source-diff): Standard webpack-minified Angular bundle (Angular signals internals); not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/6468.c96c2b4ce2f82476.js | AI (source-diff): Standard webpack-minified Angular bundle with i18n JSON; not obfuscated malware. | ai | |
| source-diff | net-exec-file:dist/main.74be5734c7a41e69.js | AI (source-diff): Same Angular bundle pattern; Function('return this') is a standard reflect-metadata polyfill idiom. | ai | |
| source-diff | net-exec-file:dist/8512.2e14258a3c327421.js | AI (source-diff): Network calls and dynamic execution are part of Angular's module loading; no dropper pattern present. | ai | |
| source-diff | obfuscated-file:dist/main.74be5734c7a41e69.js | AI (source-diff): Standard webpack-minified Angular bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/2395.d8b554fe5fdbaa9a.js | AI (source-diff): Standard webpack-minified Angular bundle; locale data and polyfills visible in sample, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/main.b9acca46762b2547.js | AI (source-diff): Network/exec pattern is webpack chunk loading infrastructure, not dropper malware. | ai | |
| source-diff | obfuscated-file:dist/main.b9acca46762b2547.js | AI (source-diff): Standard webpack-minified Angular main bundle; reflect-metadata polyfill visible in sample. | ai | |
| source-diff | net-exec-file:dist/2395.d8b554fe5fdbaa9a.js | AI (source-diff): Network/exec pattern is webpack chunk loading infrastructure, not dropper malware. | ai | |
| phantom-deps | phantom-dep:@angular-extensions/elements | AI (phantom-deps): Angular module-based usage; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:slick-carousel | AI (phantom-deps): CSS/JS carousel loaded via config, not direct TS import. | ai | |
| phantom-deps | phantom-dep:jspdf | AI (phantom-deps): Bundled Angular app; deps declared for webpack bundling, not direct import in analyzed entry points. | ai | |
| phantom-deps | phantom-dep:lodash | AI (phantom-deps): Same — bundled transitive dep declared in package.json for bundler resolution. | ai | |
| phantom-deps | phantom-dep:ngx-webcam | AI (phantom-deps): Angular component library used via template/module, not direct TS import detectable by heuristic. | ai | |
| phantom-deps | phantom-dep:tree-model | AI (phantom-deps): Bundled dep; heuristic false positive for this Angular app pattern. | ai | |
| phantom-deps | phantom-dep:ngx-bootstrap | AI (phantom-deps): Angular module-based usage; not detectable as direct import by phantom-dep heuristic. | ai | |
| phantom-deps | phantom-dep:@carbon/styles | AI (phantom-deps): CSS/style package imported via webpack config, not TS import. | ai | |
| phantom-deps | phantom-dep:@ng-select/ng-select | AI (phantom-deps): Angular module-based usage; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:systemjs-webpack-interop | AI (phantom-deps): Used in webpack config, not direct TS import; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit Angular/TypeScript runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@openmrs/ngx-file-uploader | AI (phantom-deps): Same org scope; likely re-exported or used indirectly; stable false positive. | ai | |
| phantom-deps | phantom-dep:@angular/compiler-cli | AI (phantom-deps): Framework-scoped Angular package loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@angular/animations | AI (phantom-deps): Framework-scoped Angular package loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@angular/material | AI (phantom-deps): Framework-scoped Angular package loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@angular/compiler | AI (phantom-deps): Framework-scoped Angular package loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@angular/cdk | AI (phantom-deps): Framework-scoped Angular package loaded by convention; stable false positive. | ai |