@pmndrs/msdfonts
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/crimsonText.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/firaCode.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/inconsolata.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/inter.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/lato.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/libreBaskerville.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/merriweather.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/montserrat.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/nunito.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/openSans.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/playfairDisplay.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/poppins.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/raleway.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/roboto.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/sourceCodePro.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/spaceMono.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | obfuscated-file:dist/workSans.js | AI (source-diff): Long lines are base64-encoded WebP font atlas data; expected for MSDF font distribution. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New font files added as package expands its font catalog; consistent with package purpose. | ai |
Versions (showing 8 of 8)
| Version | Deps | Published |
|---|---|---|
| 1.0.73 | 0 / 0 | |
| 1.0.72 | 0 / 0 | |
| 1.0.71 | 0 / 0 | |
| 1.0.70 | 0 / 0 | |
| 1.0.69 | 0 / 0 | |
| 1.0.68 | 0 / 0 | |
| 1.0.67 | 0 / 0 | |
| 1.0.66 | 0 / 0 |
v1.0.73
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.72
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.71
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.70
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.69
18 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.68
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.67
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.66
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.