@saasquatch/mint-components
A minimal design library with components for referral and loyalty experiences. Built with Shoelace components by Saasquatch.
7
Versions
MIT
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
logvollisqjohanventerdereksiemenssquatch-noahwcianhitchcocklocrianjayden-chan00salmonandiluo
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/mint-components/p-bbbd6e44.entry.js | AI (source-diff): Standard Stencil/TypeScript minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-b4fa20ce.entry.js | AI (source-diff): Standard Stencil/TypeScript minified build output; not obfuscation. | ai | |
| source-diff | net-exec-file:dist/mint-components/p-b4fa20ce.entry.js | AI (source-diff): Network calls and dynamic code in Stencil component bundles are expected for a UI component library. | ai | |
| source-diff | obfuscated-file:dist/esm-es5/ShadowViewAddon-0b980200.js | AI (source-diff): Standard Stencil/TypeScript minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-c8a3f3b0.js | AI (source-diff): Standard Stencil/TypeScript minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-044f930a.system.js | AI (source-diff): Standard Stencil/TypeScript minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-37883f0c.system.entry.js | AI (source-diff): Standard Stencil/TypeScript minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-3ca77515.system.entry.js | AI (source-diff): Standard Stencil/TypeScript minified build output; not obfuscation. | ai | |
| source-diff | net-exec-file:dist/mint-components/p-3ca77515.system.entry.js | AI (source-diff): Network calls and dynamic code in Stencil component bundles are expected for a UI component library. | ai | |
| phantom-deps | phantom-dep:canvas-confetti | AI (phantom-deps): Legitimate UI dependency for confetti animations; may be dynamically loaded rather than statically imported. | ai | |
| phantom-deps | phantom-dep:@veriff/incontext-sdk | AI (phantom-deps): Legitimate identity verification SDK dependency; may be conditionally/dynamically loaded. | ai | |
| source-diff | net-exec-file:dist/mint-components/p-f611c11a.system.entry.js | AI (source-diff): Network calls and dynamic code are part of normal Stencil component runtime behavior, not dropper malware. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-7a673f14.system.entry.js | AI (source-diff): Standard Stencil.js minified build output; TypeScript helpers and component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-8300e806.js | AI (source-diff): Standard Stencil.js minified build output; component styling and share logic visible in sample. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-a3eefe38.entry.js | AI (source-diff): Standard Stencil.js minified build output; Netflix theme config visible in sample, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-b3f18de4.entry.js | AI (source-diff): Standard Stencil.js minified build output; ES module imports and lodash-style utilities visible. | ai | |
| source-diff | net-exec-file:dist/mint-components/p-b3f18de4.entry.js | AI (source-diff): Network calls and dynamic code are part of normal Stencil component runtime behavior, not dropper malware. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-e846e3bb.system.js | AI (source-diff): Standard Stencil.js SystemJS minified build output; TypeScript helpers pattern. | ai | |
| source-diff | obfuscated-file:dist/mint-components/p-f611c11a.system.entry.js | AI (source-diff): Standard Stencil.js SystemJS minified build output; TypeScript helpers pattern. | ai | |
| source-diff | obfuscated-file:dist/esm-es5/ShadowViewAddon-cc32bca2.js | AI (source-diff): Standard Stencil.js minified build output for ESM-ES5 target. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): patch-package is a standard dev tool for applying local patches; stable for this package. | ai | |
| phantom-deps | phantom-dep:@raisins/stencil-docs-target | AI (phantom-deps): Docs tooling dep from same org; stable false positive. | ai | |
| phantom-deps | phantom-dep:fast-equals | AI (phantom-deps): Utility dep likely consumed via bundled Stencil output; stable false positive. | ai | |
| phantom-deps | phantom-dep:dom-context | AI (phantom-deps): Peer/transitive dep for dom-context-hooks; expected for this component library. | ai | |
| phantom-deps | phantom-dep:graphql | AI (phantom-deps): Runtime dep used by graphql-request; likely imported indirectly or at bundle time. | ai |