@readium/navigator
Next generation SDK for publications in Web Apps
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@readium/decorator | AI (dependencies): First-party workspace package from same monorepo. | ai | |
| dependencies | unvetted-dep:@readium/helpers | AI (dependencies): First-party workspace package from same monorepo. | ai | |
| source-diff | obfuscated-file:dist/dom/_readium_cssSelectorGenerator.js | AI (source-diff): Vite-bundled minified dist output, not obfuscation. | ai | |
| source-diff | obfuscated-file:src/webpub/WebPubBlobBuilder.ts | AI (source-diff): Long line is a bundled minification of css-selector-generator (declared devDep); expected build artifact for this EPUB reader package. | ai | |
| source-diff | obfuscated-file:types/src/webpub/css/WebPubStylesheet.d.ts | AI (source-diff): Long line is a CSS string literal in a TypeScript declaration file; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/fr-C5HEel98-C5HEel98.js | AI (source-diff): Vite-generated i18n chunk (French locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/it-DFOBoXGy-DFOBoXGy-DFOBoXGy.js | AI (source-diff): Vite-generated i18n chunk (Italian locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/it-DFOBoXGy-DFOBoXGy.js | AI (source-diff): Vite-generated i18n chunk (Italian locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/pt_PT-Di3sVjze-Di3sVjze-Di3sVjze.js | AI (source-diff): Vite-generated i18n chunk (Portuguese locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/pt_PT-Di3sVjze-Di3sVjze.js | AI (source-diff): Vite-generated i18n chunk (Portuguese locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/sv-BfzAFsVN-BfzAFsVN-BfzAFsVN.js | AI (source-diff): Vite-generated i18n chunk (Swedish locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/sv-BfzAFsVN-BfzAFsVN.js | AI (source-diff): Vite-generated i18n chunk (Swedish locale strings); benign build output. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New files are locale i18n chunks from Vite build; expected growth pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/ar-DyHX_uy2-DyHX_uy2-DyHX_uy2.js | AI (source-diff): Vite-generated i18n chunk (Arabic locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/ar-DyHX_uy2-DyHX_uy2.js | AI (source-diff): Vite-generated i18n chunk (Arabic locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/da-Dct0PS3E-Dct0PS3E-Dct0PS3E.js | AI (source-diff): Vite-generated i18n chunk (Danish locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/da-Dct0PS3E-Dct0PS3E.js | AI (source-diff): Vite-generated i18n chunk (Danish locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/fr-C5HEel98-C5HEel98-C5HEel98.js | AI (source-diff): Vite-generated i18n chunk (French locale strings); benign build output. | ai | |
| source-diff | obfuscated-file:dist/sv-BfzAFsVN.js | AI (source-diff): Minified i18n locale bundle (Swedish) for EPUB reader; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/da-Dct0PS3E.js | AI (source-diff): Minified i18n locale bundle (Danish) for EPUB reader; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/ar-DyHX_uy2.js | AI (source-diff): Minified i18n locale bundle (Arabic) for EPUB reader; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/pt_PT-Di3sVjze.js | AI (source-diff): Minified i18n locale bundle (Portuguese) for EPUB reader; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/it-DFOBoXGy.js | AI (source-diff): Minified i18n locale bundle (Italian) for EPUB reader; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/fr-C5HEel98.js | AI (source-diff): Minified i18n locale bundle (French) for EPUB reader; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:src/dom/_readium_cssSelectorGenerator.js | AI (source-diff): Bundled copy of css-selector-generator dep, generated by documented build script; stable for this package. | ai |
Versions (showing 28 of 28)
| Version | Deps | Published |
|---|---|---|
| 2.7.0 | 4 / 8 | |
| 2.6.1 | 0 / 11 | |
| 2.6.0 | 0 / 11 | |
| 2.5.8 | 0 / 12 | |
| 2.5.7 | 0 / 12 | |
| 2.5.6 | 0 / 12 | |
| 2.5.5 | 0 / 12 | |
| 2.5.4 | 0 / 12 | |
| 2.5.3 | 0 / 12 | |
| 2.5.2 | 0 / 12 | |
| 2.5.1 | 0 / 12 | |
| 2.5.0 | 0 / 12 | |
| 2.4.0 | 0 / 12 | |
| 2.3.1 | 0 / 12 | |
| 2.3.0 | 0 / 12 | |
| 2.2.9 | 0 / 13 | |
| 2.2.8 | 0 / 12 | |
| 2.2.7 | 0 / 12 | |
| 2.2.6 | 0 / 12 | |
| 2.2.5 | 0 / 12 | |
| 2.2.4 | 0 / 12 | |
| 2.2.3 | 0 / 12 | |
| 2.2.2 | 0 / 12 | |
| 2.2.1 | 0 / 12 | |
| 2.2.0 | 0 / 12 | |
| 2.1.1 | 0 / 12 | |
| 2.1.0 | 0 / 12 | |
| 2.0.0 | 0 / 12 |
v2.7.0
18 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.