@qualcomm-ui/utils
14
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
mynameistechnorbowerqcom
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publishing is validated by SLSA/Sigstore attestation; legitimate automation change. | ai | |
| provenance | missing-githead | AI (provenance): Consistent with CI pipeline change; SLSA provenance attestation compensates for missing gitHead. | ai | |
| source-diff | obfuscated-file:dist/files/index.cjs | AI (source-diff): Standard minified build output; logic is readable file-utility code with no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/files/index.js | AI (source-diff): Standard minified build output; same file-utility logic as .cjs counterpart. | ai | |
| source-diff | obfuscated-file:dist/files/mime-types.d.ts | AI (source-diff): Long single-line MIME-type lookup table in a .d.ts; not obfuscation, just a data constant. | ai |