@principal-ai/repository-abstraction
Repository and file system abstraction layer
19
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
fernando-ram-lugo
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:src/index.js | AI (source-diff): Minified by bun build --minify per documented build scripts; content is benign utility code. | ai | |
| source-diff | obfuscated-file:dist/index.mjs | AI (source-diff): File is minified build output from `bun build --minify`; declared in build:bundle script. Not obfuscation. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase due to bundling both ESM+CJS with inline sourcemaps; explained by build script change. | ai | |
| source-diff | obfuscated-file:dist/index.cjs | AI (source-diff): Minified by bun build --minify per declared build script; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/node.cjs | AI (source-diff): Minified by bun build --minify per declared build script; not obfuscated malware. | ai |