@superblocksteam/vite-plugin-file-sync

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

superblocksteam-adminnickrttn-sb

Keywords

vite-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	obfuscated-file:dist/ai-service/prompt-builder-service/static-fragments/platform-parts/superblocks-theming-chakra-new.js	AI (source-diff): Long lines are embedded markdown documentation strings (AI prompts), not obfuscated code. Stable pattern for this package.	ai	2026/06/07
source-diff	obfuscated-file:dist/ai-service/agent/apis-system-prompt.d.ts	AI (source-diff): Long lines are embedded AI system prompt strings in a .d.ts declaration file, not obfuscated executable code.	ai	2026/06/07
publish-pattern	new-deps-added	AI (publish-pattern): New deps (tar, tokenlens, @babel/types, etc.) are all reputable packages matching the new AI service feature.	ai	2026/06/07
maintainer-change	maintainer-added	AI (maintainer-change): New maintainers are within the same Superblocks org; consistent with team growth.	ai	2026/06/07
source-diff	large-new-source-files	AI (source-diff): 260 new files correspond to the new ai-service module; consistent with feature expansion, not injection.	ai	2026/06/07
source-diff	obfuscated-file:dist/ai-service/skills/system/superblocks-api/references/rest-apis.generated.d.ts	AI (source-diff): Long-line .d.ts files export markdown documentation strings; not obfuscated code.	ai	2026/06/06
source-diff	obfuscated-file:dist/ai-service/skills/system/superblocks-api/references/graphql.generated.d.ts	AI (source-diff): Long-line .d.ts files export markdown documentation strings; not obfuscated code.	ai	2026/06/06
source-diff	obfuscated-file:dist/ai-service/skills/system/superblocks-frontend/references/embedding.generated.d.ts	AI (source-diff): Long-line .d.ts files export markdown documentation strings; not obfuscated code.	ai	2026/06/06
source-diff	obfuscated-file:dist/ai-service/skills/system/superblocks-api/references/code-blocks.generated.d.ts	AI (source-diff): Long-line .d.ts files export markdown documentation strings; not obfuscated code.	ai	2026/06/06
source-diff	obfuscated-file:dist/ai-service/skills/system/third-party-migration/claude-design.generated.d.ts	AI (source-diff): Long lines are markdown documentation embedded as a string literal in a generated .d.ts file, not obfuscated code.	ai	2026/06/05
phantom-deps	phantom-dep:lucide-static	AI (phantom-deps): Config-referenced; stable false positive for this package.	ai	2026/05/22
phantom-deps	phantom-dep:@babel/core	AI (phantom-deps): Framework-scoped, loaded by convention in build tooling.	ai	2026/05/22
phantom-deps	phantom-dep:lru-cache	AI (phantom-deps): Config-referenced dep in a build tool; stable false positive for this package.	ai	2026/05/22
phantom-deps	phantom-dep:@types/turndown	AI (phantom-deps): Type-only dep; not directly imported at runtime by design.	ai	2026/05/22
phantom-deps	phantom-dep:eventsource-parser	AI (phantom-deps): Config-referenced; stable false positive for this package.	ai	2026/05/22
phantom-deps	phantom-dep:@superblocksteam/linter	AI (phantom-deps): Same-org sibling dep; stable false positive for this monorepo package.	ai	2026/05/16
phantom-deps	phantom-dep:@typescript-eslint/parser	AI (phantom-deps): Same monorepo pattern; stable false positive for this package.	ai	2026/05/16
phantom-deps	phantom-dep:@opentelemetry/api-logs	AI (phantom-deps): Same monorepo pattern; stable false positive for this package.	ai	2026/05/16
phantom-deps	phantom-dep:@anthropic-ai/tokenizer	AI (phantom-deps): Same monorepo pattern; stable false positive for this package.	ai	2026/05/16
phantom-deps	phantom-dep:path-to-regexp	AI (phantom-deps): Same monorepo pattern; stable false positive for this package.	ai	2026/05/16
phantom-deps	phantom-dep:@lezer/common	AI (phantom-deps): Same monorepo pattern; stable false positive for this package.	ai	2026/05/16
phantom-deps	phantom-dep:tokenlens	AI (phantom-deps): Same monorepo pattern; stable false positive for this package.	ai	2026/05/16
phantom-deps	phantom-dep:winston	AI (phantom-deps): Same monorepo pattern; stable false positive for this package.	ai	2026/05/16
phantom-deps	phantom-dep:ignore	AI (phantom-deps): Same monorepo pattern; stable false positive for this package.	ai	2026/05/16
phantom-deps	phantom-dep:acorn	AI (phantom-deps): Monorepo build tool; phantom-dep heuristic fires on config-referenced deps, stable false positive.	ai	2026/05/16

Versions (showing 51 of 94)

View all versions

Version	Deps	Published
2.0.124	49 / 43	2026-06-04
2.0.123	46 / 40	2026-05-29
2.0.122	46 / 40	2026-05-28
2.0.121	46 / 40	2026-05-27
2.0.120	46 / 40	2026/05/26
2.0.119	46 / 39	2026-05-25
2.0.118	46 / 39	2026-05-22
2.0.117	46 / 39	2026-05-20
2.0.114	45 / 39	2026-04-28
2.0.113	45 / 39	2026-04-27
2.0.112	45 / 39	2026-04-23
2.0.111	45 / 39	2026-04-23
2.0.110	45 / 39	2026-04-22
2.0.109	45 / 39	2026-04-17
2.0.108	45 / 39	2026-04-15
2.0.107	45 / 39	2026-04-14
2.0.106	45 / 39	2026-04-14
2.0.105	45 / 39	2026-04-07
2.0.104	45 / 39	2026-04-04
2.0.103	45 / 38	2026-04-02
2.0.102	44 / 38	2026-04-02
2.0.101	44 / 38	2026-04-02
2.0.89	40 / 35	2026-02-24
2.0.88	40 / 35	2026-02-20
2.0.87	40 / 35	2026-02-19
2.0.86	40 / 29	2026-02-17
2.0.85	40 / 29	2026-02-12
2.0.80	49 / 35	2026-01-28
2.0.79	49 / 35	2026-01-28
2.0.78	49 / 35	2026-01-26
2.0.77	46 / 33	2026-01-22
2.0.76	46 / 32	2026-01-14
2.0.75	46 / 32	2026-01-14
2.0.74	46 / 32	2026-01-09
2.0.73	46 / 32	2026-01-09
2.0.72	46 / 32	2026-01-08
2.0.71	46 / 32	2025-12-22
2.0.70	46 / 32	2025-12-15
2.0.69	46 / 32	2025-12-08
2.0.68	46 / 32	2025-12-05
2.0.67	46 / 31	2025-11-30
2.0.66	46 / 31	2025-11-30
2.0.65	46 / 31	2025-11-28
2.0.64	46 / 31	2025-11-22
2.0.63	46 / 31	2025-11-21
2.0.62	46 / 31	2025-11-14
2.0.61	46 / 31	2025-11-14
2.0.60	46 / 31	2025-11-14
2.0.59	46 / 31	2025-11-13
2.0.58	46 / 31	2025-11-06
2.0.57	46 / 31	2025-11-05

v2.0.124

2 findings

HIGH New obfuscated file: dist/ai-service/skills/system/third-party-migration/claude-design.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.123

2 findings

HIGH New obfuscated file: dist/ai-service/skills/system/third-party-migration/claude-design.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.122

2 findings

HIGH New obfuscated file: dist/ai-service/skills/system/third-party-migration/claude-design.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.121

2 findings

HIGH New obfuscated file: dist/ai-service/skills/system/third-party-migration/claude-design.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.120

2 findings

HIGH New obfuscated file: dist/ai-service/skills/system/third-party-migration/claude-design.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.119

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.118

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.117

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.114

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.113

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.112

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.111

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.110

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.109

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.108

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.107

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.106

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.105

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.104

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.103

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.102

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.101

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.89

4 findings

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-api/references/code-blocks.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-frontend/references/embedding.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-api/references/graphql.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.88

4 findings

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-api/references/code-blocks.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-frontend/references/embedding.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-api/references/graphql.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.87

4 findings

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-api/references/code-blocks.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-frontend/references/embedding.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-api/references/graphql.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.86

5 findings

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-api/references/code-blocks.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-frontend/references/embedding.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-api/references/graphql.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/ai-service/skills/system/superblocks-api/references/rest-apis.generated.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.85