@tachybase/module-web
Provides a client interface for the TachyBase server
80
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
sealdaytomyjan
Keywords
System management
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by addition of antd locale files and cronstrue bundle; no injected payload. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/ar_EG.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated, no executable payload. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/az_AZ.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/bg_BG.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/bn_BD.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/by_BY.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/ca_ES.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/cs_CZ.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/da_DK.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/de_DE.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/el_GR.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/en_GB.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/en_US.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/es_ES.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/et_EE.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/locale/antd/eu_ES.js | AI (source-diff): Single-line JSON antd locale data; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/node_modules/cronstrue/dist/cronstrue.js | AI (source-diff): Bundled cronstrue webpack output; standard minified library, no malicious payload. | ai | |
| source-diff | large-new-source-files | AI (source-diff): 391 new files are antd locale JSON files and cronstrue bundle; expected for a web client module adding i18n support. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Build-time locale file loading from antd; not a runtime arbitrary module load risk. | ai |
Versions (showing 80 of 80)
| Version | Deps | Published |
|---|---|---|
| 1.6.24 | 0 / 23 | |
| 1.6.23 | 0 / 23 | |
| 1.6.22 | 0 / 23 | |
| 1.6.21 | 0 / 23 | |
| 1.6.20 | 0 / 23 | |
| 1.6.19 | 0 / 23 | |
| 1.6.18 | 0 / 23 | |
| 1.6.17 | 0 / 23 | |
| 1.6.16 | 0 / 23 | |
| 1.6.15 | 0 / 23 | |
| 1.6.14 | 0 / 23 | |
| 1.6.0 | 0 / 21 | |
| 1.5.1 | 0 / 21 | |
| 1.5.0 | 0 / 21 | |
| 1.4.0 | 0 / 21 | |
| 1.3.25 | 0 / 21 | |
| 1.3.24 | 0 / 21 | |
| 1.3.23 | 0 / 21 | |
| 1.3.22 | 0 / 20 | |
| 1.3.21 | 0 / 17 | |
| 1.3.20 | 0 / 17 | |
| 1.3.19 | 0 / 17 | |
| 1.3.18 | 0 / 17 | |
| 1.3.17 | 0 / 17 | |
| 1.3.16 | 0 / 17 | |
| 1.3.15 | 0 / 17 | |
| 1.3.14 | 0 / 17 | |
| 1.3.13 | 0 / 17 | |
| 1.3.12 | 0 / 17 | |
| 1.3.11 | 0 / 17 | |
| 1.3.10 | 0 / 17 | |
| 1.3.9 | 0 / 17 | |
| 1.3.8 | 0 / 17 | |
| 1.3.7 | 0 / 17 | |
| 1.3.6 | 0 / 17 | |
| 1.3.5 | 0 / 17 | |
| 1.3.2 | 0 / 17 | |
| 1.3.1 | 0 / 17 | |
| 1.3.0 | 0 / 17 | |
| 1.2.15 | 0 / 17 | |
| 1.2.14 | 0 / 17 | |
| 1.2.13 | 0 / 17 | |
| 1.2.12 | 0 / 17 | |
| 1.2.11 | 0 / 17 | |
| 1.2.10 | 0 / 17 | |
| 1.2.9 | 0 / 17 | |
| 1.2.8 | 0 / 17 | |
| 1.2.7 | 0 / 17 | |
| 1.2.6 | 0 / 17 | |
| 1.2.5 | 0 / 17 | |
| 1.2.4 | 0 / 17 | |
| 1.2.3 | 0 / 17 | |
| 1.2.2 | 0 / 17 | |
| 1.2.0 | 0 / 17 | |
| 1.1.33 | 0 / 17 | |
| 1.1.32 | 0 / 17 | |
| 1.1.31 | 0 / 17 | |
| 1.1.28 | 0 / 17 | |
| 1.1.27 | 0 / 17 | |
| 1.1.25 | 0 / 17 | |
| 1.1.24 | 0 / 17 | |
| 1.1.23 | 0 / 17 | |
| 1.1.22 | 0 / 17 | |
| 1.1.21 | 0 / 17 | |
| 1.1.20 | 0 / 17 | |
| 1.1.19 | 0 / 17 | |
| 1.1.16 | 0 / 17 | |
| 1.1.15 | 0 / 17 | |
| 1.1.14 | 0 / 17 | |
| 1.1.12 | 0 / 17 | |
| 1.1.11 | 0 / 17 | |
| 1.1.10 | 0 / 17 | |
| 1.1.9 | 0 / 17 | |
| 1.1.8 | 0 / 17 | |
| 1.1.2 | 0 / 17 | |
| 1.1.1 | 0 / 17 | |
| 1.1.0 | 0 / 17 | |
| 1.0.25 | 0 / 17 | |
| 1.0.18 | 0 / 17 | |
| 1.0.6 | 0 / 17 |
v1.6.24
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.6.23
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.18
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.6
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.