← Home

@univerjs-pro/docs-exchange-client

[![npm version](https://img.shields.io/npm/v/@univerjs-pro/docs-exchange-client)](https://npmjs.org/packages/@univerjs-pro/docs-exchange-client) [![license](https://img.shields.io/npm/l/@univerjs-pro/docs-exchange-client)](https://img.shields.io/npm/l/@un

32
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

jikkaihexf00mengshukejiwendellhu95

Keywords

univeruniver-prodocsimport-exportclient

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:dynamic-require AI (semgrep): Bundled module resolution in obfuscated dist; no hostile target. ai
phantom-deps phantom-dep:pako AI (phantom-deps): pako used transitively; declared-not-imported heuristic FP. ai
phantom-deps phantom-dep:@univerjs/icons AI (phantom-deps): Icon assets referenced indirectly; benign phantom dep, heuristic-only. ai
phantom-deps phantom-dep:@univerjs/docs AI (phantom-deps): Transitive/runtime dep of the exchange plugin ecosystem; not directly imported in this thin registration bundle. ai
phantom-deps phantom-dep:@univerjs/docs-ui AI (phantom-deps): UI dep for the docs plugin; benign phantom dep, heuristic-only. ai
phantom-deps phantom-dep:@univerjs/protocol AI (phantom-deps): Protocol dep used transitively; benign phantom dep, heuristic-only. ai
semgrep semgrep:obfuscation-while-true AI (semgrep): javascript-obfuscator output wraps benign Univer plugin-registration code; no malicious sink. Stable source-protection pattern across all 647 versions. ai
semgrep semgrep:obfuscation-hex-functions AI (semgrep): Hex-named functions are obfuscator artifacts over benign plugin code; no network/env/exec. Consistent commercial source protection for @univerjs-pro/*. ai

Versions (showing 32 of 32)

Version Deps Published
0.21.1 3 / 3
0.6.10 3 / 4
0.6.9 3 / 4
0.6.8 3 / 4
0.6.7 3 / 4
0.6.6 3 / 4
0.6.5 3 / 4
0.6.4 3 / 4
0.6.3 3 / 4
0.6.2 3 / 4
0.6.1 3 / 4
0.6.0 3 / 4
0.5.5 3 / 4
0.5.4 3 / 4
0.5.3 3 / 4
0.5.2 3 / 4
0.5.1 3 / 4
0.5.0 3 / 4
0.4.2 5 / 6
0.4.1 7 / 7
0.4.0 7 / 7
0.3.0 7 / 7
0.2.15 7 / 7
0.2.14 7 / 7
0.2.13 7 / 7
0.2.12 4 / 10
0.2.11 4 / 10
0.2.10 4 / 10
0.2.9 4 / 10
0.2.8 4 / 10
0.2.7 4 / 10
0.2.6 4 / 10

v0.6.10

16 findings
HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x48d72d=_0x9db4;function _0x38fa(){var _0x492632=['IExchangeOperateService','exchange.download','_con

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x48d72d=_0x9db4;function _0x38fa(){var _0x492632=['IExchangeOperateService','exchange.download','_con

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x48d72d=_0x9db4;function _0x38fa(){var _0x492632=['IExchangeOperateService','exchange.download','_con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x15aeed=_0x10cd;(function(_0x1da751,_0x5e60e9){var _0x4f920b=_0x10cd,_0x316bf8=_0x1da751();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x15aeed=_0x10cd;(function(_0x1da751,_0x5e60e9){var _0x4f920b=_0x10cd,_0x316bf8=_0x1da751();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x15aeed=_0x10cd;(function(_0x1da751,_0x5e60e9){var _0x4f920b=_0x10cd,_0x316bf8=_0x1da751();while(!![]){try{var _0x

HIGH obfuscation-while-true: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x15aeed=_0x10cd;(function(_0x1da751,_0x5e60e9){var _0x4f920b=_0x10cd,_0x316bf8=_0x1da751();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x15aeed=_0x10cd;(function(_0x1da751,_0x5e60e9){var _0x4f920b=_0x10cd,_0x316bf8=_0x1da751();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x15aeed=_0x10cd;(function(_0x1da751,_0x5e60e9){var _0x4f920b=_0x10cd,_0x316bf8=_0x1da751();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x568b(){var _0x22a619=['_initCommands','10zkDeuW','symbol','44992053kPWLIz','_commandService','Plugin','forEa

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x568b(){var _0x22a619=['_initCommands','10zkDeuW','symbol','44992053kPWLIz','_commandService','Plugin','forEa

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x568b(){var _0x22a619=['_initCommands','10zkDeuW','symbol','44992053kPWLIz','_commandService','Plugin','forEa

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x568b(){var _0x22a619=['_initCommands','10zkDeuW','symbol','44992053kPWLIz','_commandService','Plugin','forEa

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x568b(){var _0x22a619=['_initCommands','10zkDeuW','symbol','44992053kPWLIz','_commandService','Plugin','forEa

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x568b(){var _0x22a619=['_initCommands','10zkDeuW','symbol','44992053kPWLIz','_commandService','Plugin','forEa

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.9

16 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x59e5f1=_0x1394;(function(_0x4cff4c,_0x193f55){var _0x454b63=_0x1394,_0x27ce2f=_0x4cff4c();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x59e5f1=_0x1394;(function(_0x4cff4c,_0x193f55){var _0x454b63=_0x1394,_0x27ce2f=_0x4cff4c();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x59e5f1=_0x1394;(function(_0x4cff4c,_0x193f55){var _0x454b63=_0x1394,_0x27ce2f=_0x4cff4c();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x3edc41=_0x5e73;(function(_0x19c176,_0x20e738){var _0x2654eb=_0x5e73,_0x3d53bd=_0x19c176();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x3edc41=_0x5e73;(function(_0x19c176,_0x20e738){var _0x2654eb=_0x5e73,_0x3d53bd=_0x19c176();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x3edc41=_0x5e73;(function(_0x19c176,_0x20e738){var _0x2654eb=_0x5e73,_0x3d53bd=_0x19c176();while(!![]){try{var _0x

HIGH obfuscation-while-true: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x3edc41=_0x5e73;(function(_0x19c176,_0x20e738){var _0x2654eb=_0x5e73,_0x3d53bd=_0x19c176();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x3edc41=_0x5e73;(function(_0x19c176,_0x20e738){var _0x2654eb=_0x5e73,_0x3d53bd=_0x19c176();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x3edc41=_0x5e73;(function(_0x19c176,_0x20e738){var _0x2654eb=_0x5e73,_0x3d53bd=_0x19c176();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1da2(){var _0x443873=['@univerjs-pro/exchange-client','exchange-client.operation.import-docx','forEach','3ce

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1da2(){var _0x443873=['@univerjs-pro/exchange-client','exchange-client.operation.import-docx','forEach','3ce

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x1da2(){var _0x443873=['@univerjs-pro/exchange-client','exchange-client.operation.import-docx','forEach','3ce

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1da2(){var _0x443873=['@univerjs-pro/exchange-client','exchange-client.operation.import-docx','forEach','3ce

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1da2(){var _0x443873=['@univerjs-pro/exchange-client','exchange-client.operation.import-docx','forEach','3ce

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1da2(){var _0x443873=['@univerjs-pro/exchange-client','exchange-client.operation.import-docx','forEach','3ce

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.8

16 findings
HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x101b29=_0x314e;function _0x4b89(){var _0xbe14bd=['3nLnJGl','disposeWithMe','docs-exchange-client.ope

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x101b29=_0x314e;function _0x4b89(){var _0xbe14bd=['3nLnJGl','disposeWithMe','docs-exchange-client.ope

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x101b29=_0x314e;function _0x4b89(){var _0xbe14bd=['3nLnJGl','disposeWithMe','docs-exchange-client.ope

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x4bbb0a=_0x4610;(function(_0x52afba,_0x199bad){var _0x93ade4=_0x4610,_0xbaf0ba=_0x52afba();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4bbb0a=_0x4610;(function(_0x52afba,_0x199bad){var _0x93ade4=_0x4610,_0xbaf0ba=_0x52afba();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4bbb0a=_0x4610;(function(_0x52afba,_0x199bad){var _0x93ade4=_0x4610,_0xbaf0ba=_0x52afba();while(!![]){try{var _0x

HIGH obfuscation-while-true: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x4bbb0a=_0x4610;(function(_0x52afba,_0x199bad){var _0x93ade4=_0x4610,_0xbaf0ba=_0x52afba();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4bbb0a=_0x4610;(function(_0x52afba,_0x199bad){var _0x93ade4=_0x4610,_0xbaf0ba=_0x52afba();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4bbb0a=_0x4610;(function(_0x52afba,_0x199bad){var _0x93ade4=_0x4610,_0xbaf0ba=_0x52afba();while(!![]){try{var _0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0xf886d6,_0x45310a){var _0x4c315a=_0xf7c3,_0x37f3b9=_0xf886d6();while(!![]){try{var _0x50c68f=parseInt(_0x4c3

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xf886d6,_0x45310a){var _0x4c315a=_0xf7c3,_0x37f3b9=_0xf886d6();while(!![]){try{var _0x50c68f=parseInt(_0x4c3

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xf886d6,_0x45310a){var _0x4c315a=_0xf7c3,_0x37f3b9=_0xf886d6();while(!![]){try{var _0x50c68f=parseInt(_0x4c3

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xf886d6,_0x45310a){var _0x4c315a=_0xf7c3,_0x37f3b9=_0xf886d6();while(!![]){try{var _0x50c68f=parseInt(_0x4c3

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xf886d6,_0x45310a){var _0x4c315a=_0xf7c3,_0x37f3b9=_0xf886d6();while(!![]){try{var _0x50c68f=parseInt(_0x4c3

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xf886d6,_0x45310a){var _0x4c315a=_0xf7c3,_0x37f3b9=_0xf886d6();while(!![]){try{var _0x50c68f=parseInt(_0x4c3

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.7

13 findings
HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x50a6fe=_0x680f;function _0x57b9(){var _0x468fb2=['add','Inject','exchange.upload','_menuManagerServi

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x50a6fe=_0x680f;function _0x57b9(){var _0x468fb2=['add','Inject','exchange.upload','_menuManagerServi

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x50a6fe=_0x680f;function _0x57b9(){var _0x468fb2=['add','Inject','exchange.upload','_menuManagerServi

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x402fe5=_0x2190;function _0x4e42(){var _0x5b8633=['4114225ITbeyW','forEach','53854650ZWgzhw','_configService','sym

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x402fe5=_0x2190;function _0x4e42(){var _0x5b8633=['4114225ITbeyW','forEach','53854650ZWgzhw','_configService','sym

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x402fe5=_0x2190;function _0x4e42(){var _0x5b8633=['4114225ITbeyW','forEach','53854650ZWgzhw','_configService','sym

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xd779(){var _0x35eb05=['CommandType','get','_initMenus','defineProperty','UniverInstanceType','IConfigService

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xd779(){var _0x35eb05=['CommandType','get','_initMenus','defineProperty','UniverInstanceType','IConfigService

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0xd779(){var _0x35eb05=['CommandType','get','_initMenus','defineProperty','UniverInstanceType','IConfigService

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xd779(){var _0x35eb05=['CommandType','get','_initMenus','defineProperty','UniverInstanceType','IConfigService

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xd779(){var _0x35eb05=['CommandType','get','_initMenus','defineProperty','UniverInstanceType','IConfigService

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xd779(){var _0x35eb05=['CommandType','get','_initMenus','defineProperty','UniverInstanceType','IConfigService

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.6

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x38bafd=_0x5844;(function(_0x1ed410,_0x36c0c5){var _0x583748=_0x5844,_0x1ba30a=_0x1ed410();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x38bafd=_0x5844;(function(_0x1ed410,_0x36c0c5){var _0x583748=_0x5844,_0x1ba30a=_0x1ed410();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x38bafd=_0x5844;(function(_0x1ed410,_0x36c0c5){var _0x583748=_0x5844,_0x1ba30a=_0x1ed410();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x2d7279=_0x2174;(function(_0x107cd2,_0x506db6){var _0x44d1b5=_0x2174,_0x2b9742=_0x107cd2();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x2d7279=_0x2174;(function(_0x107cd2,_0x506db6){var _0x44d1b5=_0x2174,_0x2b9742=_0x107cd2();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x2d7279=_0x2174;(function(_0x107cd2,_0x506db6){var _0x44d1b5=_0x2174,_0x2b9742=_0x107cd2();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5046(){var _0x1c40f5=['2216907BDgmzT','importDOCXToUnitId','258048ypxTfL','RibbonStartGroup','901913ZnIQqO',

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5046(){var _0x1c40f5=['2216907BDgmzT','importDOCXToUnitId','258048ypxTfL','RibbonStartGroup','901913ZnIQqO',

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x5046(){var _0x1c40f5=['2216907BDgmzT','importDOCXToUnitId','258048ypxTfL','RibbonStartGroup','901913ZnIQqO',

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5046(){var _0x1c40f5=['2216907BDgmzT','importDOCXToUnitId','258048ypxTfL','RibbonStartGroup','901913ZnIQqO',

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5046(){var _0x1c40f5=['2216907BDgmzT','importDOCXToUnitId','258048ypxTfL','RibbonStartGroup','901913ZnIQqO',

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5046(){var _0x1c40f5=['2216907BDgmzT','importDOCXToUnitId','258048ypxTfL','RibbonStartGroup','901913ZnIQqO',

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.5

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x43655e=_0x36fa;(function(_0x45760b,_0x35d0ad){var _0x18d15c=_0x36fa,_0x44ea74=_0x45760b();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x43655e=_0x36fa;(function(_0x45760b,_0x35d0ad){var _0x18d15c=_0x36fa,_0x44ea74=_0x45760b();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x43655e=_0x36fa;(function(_0x45760b,_0x35d0ad){var _0x18d15c=_0x36fa,_0x44ea74=_0x45760b();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x4ce389=_0x4bf0;(function(_0x498f54,_0x5c6fc2){var _0x11b5ce=_0x4bf0,_0x1225ca=_0x498f54();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4ce389=_0x4bf0;(function(_0x498f54,_0x5c6fc2){var _0x11b5ce=_0x4bf0,_0x1225ca=_0x498f54();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4ce389=_0x4bf0;(function(_0x498f54,_0x5c6fc2){var _0x11b5ce=_0x4bf0,_0x1225ca=_0x498f54();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3d1e(_0x4dcb8e,_0x5a380e){var _0x3ca983=_0x3ca9();return _0x3d1e=function(_0x3d1ec2,_0x25ba6b){_0x3d1ec2=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3d1e(_0x4dcb8e,_0x5a380e){var _0x3ca983=_0x3ca9();return _0x3d1e=function(_0x3d1ec2,_0x25ba6b){_0x3d1ec2=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x3d1e(_0x4dcb8e,_0x5a380e){var _0x3ca983=_0x3ca9();return _0x3d1e=function(_0x3d1ec2,_0x25ba6b){_0x3d1ec2=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3d1e(_0x4dcb8e,_0x5a380e){var _0x3ca983=_0x3ca9();return _0x3d1e=function(_0x3d1ec2,_0x25ba6b){_0x3d1ec2=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3d1e(_0x4dcb8e,_0x5a380e){var _0x3ca983=_0x3ca9();return _0x3d1e=function(_0x3d1ec2,_0x25ba6b){_0x3d1ec2=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3d1e(_0x4dcb8e,_0x5a380e){var _0x3ca983=_0x3ca9();return _0x3d1e=function(_0x3d1ec2,_0x25ba6b){_0x3d1ec2=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.4

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x4cc998=_0x2b15;(function(_0x4d31de,_0x326748){var _0x3ce1a3=_0x2b15,_0x2ac14b=_0x4d31de();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x4cc998=_0x2b15;(function(_0x4d31de,_0x326748){var _0x3ce1a3=_0x2b15,_0x2ac14b=_0x4d31de();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x4cc998=_0x2b15;(function(_0x4d31de,_0x326748){var _0x3ce1a3=_0x2b15,_0x2ac14b=_0x4d31de();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x804a19=_0x2807;(function(_0x318be6,_0x3ac29b){var _0x288a50=_0x2807,_0x428b89=_0x318be6();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x804a19=_0x2807;(function(_0x318be6,_0x3ac29b){var _0x288a50=_0x2807,_0x428b89=_0x318be6();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x804a19=_0x2807;(function(_0x318be6,_0x3ac29b){var _0x288a50=_0x2807,_0x428b89=_0x318be6();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x77a4(_0x314e50,_0x466a82){var _0x45952d=_0x4595();return _0x77a4=function(_0x77a4d4,_0x8c748d){_0x77a4d4=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x77a4(_0x314e50,_0x466a82){var _0x45952d=_0x4595();return _0x77a4=function(_0x77a4d4,_0x8c748d){_0x77a4d4=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x77a4(_0x314e50,_0x466a82){var _0x45952d=_0x4595();return _0x77a4=function(_0x77a4d4,_0x8c748d){_0x77a4d4=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x77a4(_0x314e50,_0x466a82){var _0x45952d=_0x4595();return _0x77a4=function(_0x77a4d4,_0x8c748d){_0x77a4d4=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x77a4(_0x314e50,_0x466a82){var _0x45952d=_0x4595();return _0x77a4=function(_0x77a4d4,_0x8c748d){_0x77a4d4=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x77a4(_0x314e50,_0x466a82){var _0x45952d=_0x4595();return _0x77a4=function(_0x77a4d4,_0x8c748d){_0x77a4d4=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.3

13 findings
HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x334db9=_0x498e;function _0x5c4d(){var _0x357fc6=['2734124Icaeib','importDOCXToUnitId','7902117oYmHFp

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x334db9=_0x498e;function _0x5c4d(){var _0x357fc6=['2734124Icaeib','importDOCXToUnitId','7902117oYmHFp

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x334db9=_0x498e;function _0x5c4d(){var _0x357fc6=['2734124Icaeib','importDOCXToUnitId','7902117oYmHFp

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x4d75aa=_0x3fd7;(function(_0x5894c0,_0xc62660){var _0x340078=_0x3fd7,_0x554fca=_0x5894c0();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4d75aa=_0x3fd7;(function(_0x5894c0,_0xc62660){var _0x340078=_0x3fd7,_0x554fca=_0x5894c0();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4d75aa=_0x3fd7;(function(_0x5894c0,_0xc62660){var _0x340078=_0x3fd7,_0x554fca=_0x5894c0();while(!![]){try{var _0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x4cdef4,_0x348bde){var _0x55e3b3=_0x1e81,_0xab5b3c=_0x4cdef4();while(!![]){try{var _0x5c9ec4=-parseInt(_0x55

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4cdef4,_0x348bde){var _0x55e3b3=_0x1e81,_0xab5b3c=_0x4cdef4();while(!![]){try{var _0x5c9ec4=-parseInt(_0x55

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4cdef4,_0x348bde){var _0x55e3b3=_0x1e81,_0xab5b3c=_0x4cdef4();while(!![]){try{var _0x5c9ec4=-parseInt(_0x55

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4cdef4,_0x348bde){var _0x55e3b3=_0x1e81,_0xab5b3c=_0x4cdef4();while(!![]){try{var _0x5c9ec4=-parseInt(_0x55

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4cdef4,_0x348bde){var _0x55e3b3=_0x1e81,_0xab5b3c=_0x4cdef4();while(!![]){try{var _0x5c9ec4=-parseInt(_0x55

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4cdef4,_0x348bde){var _0x55e3b3=_0x1e81,_0xab5b3c=_0x4cdef4();while(!![]){try{var _0x5c9ec4=-parseInt(_0x55

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.2

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x4f7518=_0x2fa5;(function(_0x48f864,_0x1170f1){var _0x5d8815=_0x2fa5,_0x24d257=_0x48f864();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x4f7518=_0x2fa5;(function(_0x48f864,_0x1170f1){var _0x5d8815=_0x2fa5,_0x24d257=_0x48f864();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x4f7518=_0x2fa5;(function(_0x48f864,_0x1170f1){var _0x5d8815=_0x2fa5,_0x24d257=_0x48f864();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x1ae1c1=_0xa0a2;(function(_0x333a55,_0x3b5b0a){var _0x550bd4=_0xa0a2,_0x34f298=_0x333a55();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x1ae1c1=_0xa0a2;(function(_0x333a55,_0x3b5b0a){var _0x550bd4=_0xa0a2,_0x34f298=_0x333a55();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x1ae1c1=_0xa0a2;(function(_0x333a55,_0x3b5b0a){var _0x550bd4=_0xa0a2,_0x34f298=_0x333a55();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2db2(_0x131c6f,_0x35f867){var _0x2fc779=_0x2fc7();return _0x2db2=function(_0x2db23f,_0xdd5a3b){_0x2db23f=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2db2(_0x131c6f,_0x35f867){var _0x2fc779=_0x2fc7();return _0x2db2=function(_0x2db23f,_0xdd5a3b){_0x2db23f=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x2db2(_0x131c6f,_0x35f867){var _0x2fc779=_0x2fc7();return _0x2db2=function(_0x2db23f,_0xdd5a3b){_0x2db23f=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2db2(_0x131c6f,_0x35f867){var _0x2fc779=_0x2fc7();return _0x2db2=function(_0x2db23f,_0xdd5a3b){_0x2db23f=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2db2(_0x131c6f,_0x35f867){var _0x2fc779=_0x2fc7();return _0x2db2=function(_0x2db23f,_0xdd5a3b){_0x2db23f=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2db2(_0x131c6f,_0x35f867){var _0x2fc779=_0x2fc7();return _0x2db2=function(_0x2db23f,_0xdd5a3b){_0x2db23f=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.1

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x30d7d7=_0x4364;(function(_0x500488,_0x3d4479){var _0x35e4c7=_0x4364,_0x544880=_0x500488();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x30d7d7=_0x4364;(function(_0x500488,_0x3d4479){var _0x35e4c7=_0x4364,_0x544880=_0x500488();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x30d7d7=_0x4364;(function(_0x500488,_0x3d4479){var _0x35e4c7=_0x4364,_0x544880=_0x500488();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x58f499=_0x4625;(function(_0x3f9953,_0x1040a3){var _0x567571=_0x4625,_0x36f6c9=_0x3f9953();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x58f499=_0x4625;(function(_0x3f9953,_0x1040a3){var _0x567571=_0x4625,_0x36f6c9=_0x3f9953();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x58f499=_0x4625;(function(_0x3f9953,_0x1040a3){var _0x567571=_0x4625,_0x36f6c9=_0x3f9953();while(!![]){try{var _0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x5155e9,_0xaf3c79){var _0x1ec119=_0x5a74,_0x5abadd=_0x5155e9();while(!![]){try{var _0x52d8c1=parseInt(_0x1ec

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5155e9,_0xaf3c79){var _0x1ec119=_0x5a74,_0x5abadd=_0x5155e9();while(!![]){try{var _0x52d8c1=parseInt(_0x1ec

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5155e9,_0xaf3c79){var _0x1ec119=_0x5a74,_0x5abadd=_0x5155e9();while(!![]){try{var _0x52d8c1=parseInt(_0x1ec

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5155e9,_0xaf3c79){var _0x1ec119=_0x5a74,_0x5abadd=_0x5155e9();while(!![]){try{var _0x52d8c1=parseInt(_0x1ec

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5155e9,_0xaf3c79){var _0x1ec119=_0x5a74,_0x5abadd=_0x5155e9();while(!![]){try{var _0x52d8c1=parseInt(_0x1ec

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5155e9,_0xaf3c79){var _0x1ec119=_0x5a74,_0x5abadd=_0x5155e9();while(!![]){try{var _0x52d8c1=parseInt(_0x1ec

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.0

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x396082=_0x2cdc;(function(_0x2f9705,_0x40793e){var _0x44b681=_0x2cdc,_0x4d65a7=_0x2f9705();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x396082=_0x2cdc;(function(_0x2f9705,_0x40793e){var _0x44b681=_0x2cdc,_0x4d65a7=_0x2f9705();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x396082=_0x2cdc;(function(_0x2f9705,_0x40793e){var _0x44b681=_0x2cdc,_0x4d65a7=_0x2f9705();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x48f1c3=_0x52a5;(function(_0x132ae5,_0x9b65b9){var _0x54dad5=_0x52a5,_0x43f7d5=_0x132ae5();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x48f1c3=_0x52a5;(function(_0x132ae5,_0x9b65b9){var _0x54dad5=_0x52a5,_0x43f7d5=_0x132ae5();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x48f1c3=_0x52a5;(function(_0x132ae5,_0x9b65b9){var _0x54dad5=_0x52a5,_0x43f7d5=_0x132ae5();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4376(){var _0x343e72=['exports','object','exchange.download','function','mergeMenu','UNIVER_DOC','ExportSing

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4376(){var _0x343e72=['exports','object','exchange.download','function','mergeMenu','UNIVER_DOC','ExportSing

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x4376(){var _0x343e72=['exports','object','exchange.download','function','mergeMenu','UNIVER_DOC','ExportSing

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4376(){var _0x343e72=['exports','object','exchange.download','function','mergeMenu','UNIVER_DOC','ExportSing

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4376(){var _0x343e72=['exports','object','exchange.download','function','mergeMenu','UNIVER_DOC','ExportSing

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4376(){var _0x343e72=['exports','object','exchange.download','function','mergeMenu','UNIVER_DOC','ExportSing

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.5

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x38f4d0=_0x11f3;(function(_0x12ed06,_0x153ba8){var _0x149378=_0x11f3,_0x1cd41a=_0x12ed06();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x38f4d0=_0x11f3;(function(_0x12ed06,_0x153ba8){var _0x149378=_0x11f3,_0x1cd41a=_0x12ed06();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x38f4d0=_0x11f3;(function(_0x12ed06,_0x153ba8){var _0x149378=_0x11f3,_0x1cd41a=_0x12ed06();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x3a5090=_0x47fb;(function(_0x5ae2ac,_0x4fa680){var _0x233210=_0x47fb,_0x178023=_0x5ae2ac();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x3a5090=_0x47fb;(function(_0x5ae2ac,_0x4fa680){var _0x233210=_0x47fb,_0x178023=_0x5ae2ac();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x3a5090=_0x47fb;(function(_0x5ae2ac,_0x4fa680){var _0x233210=_0x47fb,_0x178023=_0x5ae2ac();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x457a(_0x539caf,_0x22574d){var _0x2b461d=_0x2b46();return _0x457a=function(_0x457a82,_0x148819){_0x457a82=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x457a(_0x539caf,_0x22574d){var _0x2b461d=_0x2b46();return _0x457a=function(_0x457a82,_0x148819){_0x457a82=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x457a(_0x539caf,_0x22574d){var _0x2b461d=_0x2b46();return _0x457a=function(_0x457a82,_0x148819){_0x457a82=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x457a(_0x539caf,_0x22574d){var _0x2b461d=_0x2b46();return _0x457a=function(_0x457a82,_0x148819){_0x457a82=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x457a(_0x539caf,_0x22574d){var _0x2b461d=_0x2b46();return _0x457a=function(_0x457a82,_0x148819){_0x457a82=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x457a(_0x539caf,_0x22574d){var _0x2b461d=_0x2b46();return _0x457a=function(_0x457a82,_0x148819){_0x457a82=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.4

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x1c5c91=_0xf048;(function(_0xabd43e,_0x5c2dbc){var _0x4798fb=_0xf048,_0x2d9301=_0xabd43e();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1c5c91=_0xf048;(function(_0xabd43e,_0x5c2dbc){var _0x4798fb=_0xf048,_0x2d9301=_0xabd43e();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1c5c91=_0xf048;(function(_0xabd43e,_0x5c2dbc){var _0x4798fb=_0xf048,_0x2d9301=_0xabd43e();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x3f801d=_0x4044;(function(_0x122cf9,_0x3090e9){var _0x705df7=_0x4044,_0x1a1a7a=_0x122cf9();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x3f801d=_0x4044;(function(_0x122cf9,_0x3090e9){var _0x705df7=_0x4044,_0x1a1a7a=_0x122cf9();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x3f801d=_0x4044;(function(_0x122cf9,_0x3090e9){var _0x705df7=_0x4044,_0x1a1a7a=_0x122cf9();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3c48(_0x5c46af,_0x267d1c){var _0xe6a530=_0xe6a5();return _0x3c48=function(_0x3c4893,_0x3fc03f){_0x3c4893=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3c48(_0x5c46af,_0x267d1c){var _0xe6a530=_0xe6a5();return _0x3c48=function(_0x3c4893,_0x3fc03f){_0x3c4893=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x3c48(_0x5c46af,_0x267d1c){var _0xe6a530=_0xe6a5();return _0x3c48=function(_0x3c4893,_0x3fc03f){_0x3c4893=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3c48(_0x5c46af,_0x267d1c){var _0xe6a530=_0xe6a5();return _0x3c48=function(_0x3c4893,_0x3fc03f){_0x3c4893=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3c48(_0x5c46af,_0x267d1c){var _0xe6a530=_0xe6a5();return _0x3c48=function(_0x3c4893,_0x3fc03f){_0x3c4893=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3c48(_0x5c46af,_0x267d1c){var _0xe6a530=_0xe6a5();return _0x3c48=function(_0x3c4893,_0x3fc03f){_0x3c4893=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.3

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x124923=_0x196b;(function(_0x57e887,_0x5767f8){var _0xfb67bb=_0x196b,_0x5bcf54=_0x57e887();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x124923=_0x196b;(function(_0x57e887,_0x5767f8){var _0xfb67bb=_0x196b,_0x5bcf54=_0x57e887();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x124923=_0x196b;(function(_0x57e887,_0x5767f8){var _0xfb67bb=_0x196b,_0x5bcf54=_0x57e887();while(!![]

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x351f(){var _0x56f99e=['_configService','166795GpYDKq','getOwnPropertyDescriptor','760143KSAOsx','5026nLZTKY'

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x351f(){var _0x56f99e=['_configService','166795GpYDKq','getOwnPropertyDescriptor','760143KSAOsx','5026nLZTKY'

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x351f(){var _0x56f99e=['_configService','166795GpYDKq','getOwnPropertyDescriptor','760143KSAOsx','5026nLZTKY'

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x326bef,_0x25c361){var _0x35dd2d=_0x322e,_0x245620=_0x326bef();while(!![]){try{var _0x45393d=parseInt(_0x35d

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x326bef,_0x25c361){var _0x35dd2d=_0x322e,_0x245620=_0x326bef();while(!![]){try{var _0x45393d=parseInt(_0x35d

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x326bef,_0x25c361){var _0x35dd2d=_0x322e,_0x245620=_0x326bef();while(!![]){try{var _0x45393d=parseInt(_0x35d

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x326bef,_0x25c361){var _0x35dd2d=_0x322e,_0x245620=_0x326bef();while(!![]){try{var _0x45393d=parseInt(_0x35d

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x326bef,_0x25c361){var _0x35dd2d=_0x322e,_0x245620=_0x326bef();while(!![]){try{var _0x45393d=parseInt(_0x35d

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x326bef,_0x25c361){var _0x35dd2d=_0x322e,_0x245620=_0x326bef();while(!![]){try{var _0x45393d=parseInt(_0x35d

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.2

13 findings
HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x1cc5(){var _0x59aa2e=['menu','merge','exchange.upload','exchange.file','OPERATION','docs-exchan

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';function _0x1cc5(){var _0x59aa2e=['menu','merge','exchange.upload','exchange.file','OPERATION','docs-exchan

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x1cc5(){var _0x59aa2e=['menu','merge','exchange.upload','exchange.file','OPERATION','docs-exchan

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x25362f=_0x3156;function _0x3106(){var _0x225855=['exchange-client.operation.export-docx','500362QJNmzf','forEach'

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x25362f=_0x3156;function _0x3106(){var _0x225855=['exchange-client.operation.export-docx','500362QJNmzf','forEach'

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x25362f=_0x3156;function _0x3106(){var _0x225855=['exchange-client.operation.export-docx','500362QJNmzf','forEach'

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x56e0(_0x43cb6b,_0x34a403){var _0x1699a1=_0x1699();return _0x56e0=function(_0x56e071,_0x5d6e45){_0x56e071=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x56e0(_0x43cb6b,_0x34a403){var _0x1699a1=_0x1699();return _0x56e0=function(_0x56e071,_0x5d6e45){_0x56e071=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x56e0(_0x43cb6b,_0x34a403){var _0x1699a1=_0x1699();return _0x56e0=function(_0x56e071,_0x5d6e45){_0x56e071=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x56e0(_0x43cb6b,_0x34a403){var _0x1699a1=_0x1699();return _0x56e0=function(_0x56e071,_0x5d6e45){_0x56e071=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x56e0(_0x43cb6b,_0x34a403){var _0x1699a1=_0x1699();return _0x56e0=function(_0x56e071,_0x5d6e45){_0x56e071=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x56e0(_0x43cb6b,_0x34a403){var _0x1699a1=_0x1699();return _0x56e0=function(_0x56e071,_0x5d6e45){_0x56e071=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.1

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x2aca4b=_0x1cad;(function(_0x14d411,_0x33c713){var _0x146efa=_0x1cad,_0x620cf2=_0x14d411();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x2aca4b=_0x1cad;(function(_0x14d411,_0x33c713){var _0x146efa=_0x1cad,_0x620cf2=_0x14d411();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x2aca4b=_0x1cad;(function(_0x14d411,_0x33c713){var _0x146efa=_0x1cad,_0x620cf2=_0x14d411();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x21065c=_0x16bf;(function(_0x38f0b2,_0x558bec){var _0x56fd12=_0x16bf,_0x5b835f=_0x38f0b2();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x21065c=_0x16bf;(function(_0x38f0b2,_0x558bec){var _0x56fd12=_0x16bf,_0x5b835f=_0x38f0b2();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x21065c=_0x16bf;(function(_0x38f0b2,_0x558bec){var _0x56fd12=_0x16bf,_0x5b835f=_0x38f0b2();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1535(_0x18a1df,_0x2c47a3){var _0x42ba40=_0x42ba();return _0x1535=function(_0x15352e,_0x533432){_0x15352e=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1535(_0x18a1df,_0x2c47a3){var _0x42ba40=_0x42ba();return _0x1535=function(_0x15352e,_0x533432){_0x15352e=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x1535(_0x18a1df,_0x2c47a3){var _0x42ba40=_0x42ba();return _0x1535=function(_0x15352e,_0x533432){_0x15352e=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1535(_0x18a1df,_0x2c47a3){var _0x42ba40=_0x42ba();return _0x1535=function(_0x15352e,_0x533432){_0x15352e=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1535(_0x18a1df,_0x2c47a3){var _0x42ba40=_0x42ba();return _0x1535=function(_0x15352e,_0x533432){_0x15352e=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1535(_0x18a1df,_0x2c47a3){var _0x42ba40=_0x42ba();return _0x1535=function(_0x15352e,_0x533432){_0x15352e=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.0

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x1f524c=_0x2015;(function(_0x394dc7,_0x46d0ee){var _0x334fbb=_0x2015,_0x32f526=_0x394dc7();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1f524c=_0x2015;(function(_0x394dc7,_0x46d0ee){var _0x334fbb=_0x2015,_0x32f526=_0x394dc7();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1f524c=_0x2015;(function(_0x394dc7,_0x46d0ee){var _0x334fbb=_0x2015,_0x32f526=_0x394dc7();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x75789f=_0x3e2c;(function(_0x3bd762,_0x4263ce){var _0x3ece5f=_0x3e2c,_0x489542=_0x3bd762();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x75789f=_0x3e2c;(function(_0x3bd762,_0x4263ce){var _0x3ece5f=_0x3e2c,_0x489542=_0x3bd762();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x75789f=_0x3e2c;(function(_0x3bd762,_0x4263ce){var _0x3ece5f=_0x3e2c,_0x489542=_0x3bd762();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xdf1c(_0xbab1cd,_0x194b32){var _0x567076=_0x5670();return _0xdf1c=function(_0xdf1cd,_0x2ac24e){_0xdf1cd=_0xdf

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0xdf1c(_0xbab1cd,_0x194b32){var _0x567076=_0x5670();return _0xdf1c=function(_0xdf1cd,_0x2ac24e){_0xdf1cd=_0xdf

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xdf1c(_0xbab1cd,_0x194b32){var _0x567076=_0x5670();return _0xdf1c=function(_0xdf1cd,_0x2ac24e){_0xdf1cd=_0xdf

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xdf1c(_0xbab1cd,_0x194b32){var _0x567076=_0x5670();return _0xdf1c=function(_0xdf1cd,_0x2ac24e){_0xdf1cd=_0xdf

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xdf1c(_0xbab1cd,_0x194b32){var _0x567076=_0x5670();return _0xdf1c=function(_0xdf1cd,_0x2ac24e){_0xdf1cd=_0xdf

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xdf1c(_0xbab1cd,_0x194b32){var _0x567076=_0x5670();return _0xdf1c=function(_0xdf1cd,_0x2ac24e){_0xdf1cd=_0xdf

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.2

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x215258=_0x4d3e;(function(_0x887f5b,_0x81fd0c){var _0x22ffaa=_0x4d3e,_0x2758af=_0x887f5b();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x215258=_0x4d3e;(function(_0x887f5b,_0x81fd0c){var _0x22ffaa=_0x4d3e,_0x2758af=_0x887f5b();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x215258=_0x4d3e;(function(_0x887f5b,_0x81fd0c){var _0x22ffaa=_0x4d3e,_0x2758af=_0x887f5b();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x5c7e53=_0x5fc3;(function(_0x46193e,_0x12ed58){var _0xfd6290=_0x5fc3,_0x382035=_0x46193e();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x5c7e53=_0x5fc3;(function(_0x46193e,_0x12ed58){var _0xfd6290=_0x5fc3,_0x382035=_0x46193e();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x5c7e53=_0x5fc3;(function(_0x46193e,_0x12ed58){var _0xfd6290=_0x5fc3,_0x382035=_0x46193e();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5673(_0x4b30b4,_0x3a508b){var _0x21142b=_0x2114();return _0x5673=function(_0x5673f8,_0x4e7987){_0x5673f8=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5673(_0x4b30b4,_0x3a508b){var _0x21142b=_0x2114();return _0x5673=function(_0x5673f8,_0x4e7987){_0x5673f8=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x5673(_0x4b30b4,_0x3a508b){var _0x21142b=_0x2114();return _0x5673=function(_0x5673f8,_0x4e7987){_0x5673f8=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5673(_0x4b30b4,_0x3a508b){var _0x21142b=_0x2114();return _0x5673=function(_0x5673f8,_0x4e7987){_0x5673f8=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5673(_0x4b30b4,_0x3a508b){var _0x21142b=_0x2114();return _0x5673=function(_0x5673f8,_0x4e7987){_0x5673f8=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5673(_0x4b30b4,_0x3a508b){var _0x21142b=_0x2114();return _0x5673=function(_0x5673f8,_0x4e7987){_0x5673f8=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.1

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x1c13c9=_0x227a;(function(_0x3c8f25,_0x4fb210){var _0x4b6241=_0x227a,_0x494932=_0x3c8f25();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1c13c9=_0x227a;(function(_0x3c8f25,_0x4fb210){var _0x4b6241=_0x227a,_0x494932=_0x3c8f25();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1c13c9=_0x227a;(function(_0x3c8f25,_0x4fb210){var _0x4b6241=_0x227a,_0x494932=_0x3c8f25();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x4015d7=_0x27aa;(function(_0x469abc,_0x134932){var _0x1e8092=_0x27aa,_0x20cfe9=_0x469abc();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4015d7=_0x27aa;(function(_0x469abc,_0x134932){var _0x1e8092=_0x27aa,_0x20cfe9=_0x469abc();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4015d7=_0x27aa;(function(_0x469abc,_0x134932){var _0x1e8092=_0x27aa,_0x20cfe9=_0x469abc();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x23d0(_0x341a4c,_0x10c2b7){var _0x209921=_0x2099();return _0x23d0=function(_0x23d073,_0x1ceeb2){_0x23d073=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x23d0(_0x341a4c,_0x10c2b7){var _0x209921=_0x2099();return _0x23d0=function(_0x23d073,_0x1ceeb2){_0x23d073=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x23d0(_0x341a4c,_0x10c2b7){var _0x209921=_0x2099();return _0x23d0=function(_0x23d073,_0x1ceeb2){_0x23d073=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x23d0(_0x341a4c,_0x10c2b7){var _0x209921=_0x2099();return _0x23d0=function(_0x23d073,_0x1ceeb2){_0x23d073=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x23d0(_0x341a4c,_0x10c2b7){var _0x209921=_0x2099();return _0x23d0=function(_0x23d073,_0x1ceeb2){_0x23d073=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x23d0(_0x341a4c,_0x10c2b7){var _0x209921=_0x2099();return _0x23d0=function(_0x23d073,_0x1ceeb2){_0x23d073=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.0

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x27df6e=_0x584c;(function(_0x19687c,_0x4f3777){var _0x528b01=_0x584c,_0x1ceb19=_0x19687c();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x27df6e=_0x584c;(function(_0x19687c,_0x4f3777){var _0x528b01=_0x584c,_0x1ceb19=_0x19687c();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x27df6e=_0x584c;(function(_0x19687c,_0x4f3777){var _0x528b01=_0x584c,_0x1ceb19=_0x19687c();while(!![]

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x314298=_0x3426;function _0x3243(){var _0x31fb56=['SUBITEMS','disposeWithMe','1149642xDOjce','BUTTON','exportDOCXB

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x314298=_0x3426;function _0x3243(){var _0x31fb56=['SUBITEMS','disposeWithMe','1149642xDOjce','BUTTON','exportDOCXB

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x314298=_0x3426;function _0x3243(){var _0x31fb56=['SUBITEMS','disposeWithMe','1149642xDOjce','BUTTON','exportDOCXB

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4ce6(_0x5357c3,_0x38a503){var _0x403056=_0x4030();return _0x4ce6=function(_0x4ce6c4,_0x1a869d){_0x4ce6c4=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x4ce6(_0x5357c3,_0x38a503){var _0x403056=_0x4030();return _0x4ce6=function(_0x4ce6c4,_0x1a869d){_0x4ce6c4=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4ce6(_0x5357c3,_0x38a503){var _0x403056=_0x4030();return _0x4ce6=function(_0x4ce6c4,_0x1a869d){_0x4ce6c4=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4ce6(_0x5357c3,_0x38a503){var _0x403056=_0x4030();return _0x4ce6=function(_0x4ce6c4,_0x1a869d){_0x4ce6c4=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4ce6(_0x5357c3,_0x38a503){var _0x403056=_0x4030();return _0x4ce6=function(_0x4ce6c4,_0x1a869d){_0x4ce6c4=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4ce6(_0x5357c3,_0x38a503){var _0x403056=_0x4030();return _0x4ce6=function(_0x4ce6c4,_0x1a869d){_0x4ce6c4=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.3.0

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x3c1b88=_0x2927;(function(_0x2569cf,_0x4f65ce){const _0x25966a=_0x2927,_0x4cf598=_0x2569cf();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x3c1b88=_0x2927;(function(_0x2569cf,_0x4f65ce){const _0x25966a=_0x2927,_0x4cf598=_0x2569cf();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x3c1b88=_0x2927;(function(_0x2569cf,_0x4f65ce){const _0x25966a=_0x2927,_0x4cf598=_0x2569cf();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x46147a=_0x4589;(function(_0x201fb5,_0x165113){const _0x709ae9=_0x4589,_0x4197d4=_0x201fb5();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x46147a=_0x4589;(function(_0x201fb5,_0x165113){const _0x709ae9=_0x4589,_0x4197d4=_0x201fb5();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x46147a=_0x4589;(function(_0x201fb5,_0x165113){const _0x709ae9=_0x4589,_0x4197d4=_0x201fb5();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x2c5120,_0xa08429){const _0x23624a=_0x5dcf,_0x2f6767=_0x2c5120();while(!![]){try{const _0x2acc8f=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x2c5120,_0xa08429){const _0x23624a=_0x5dcf,_0x2f6767=_0x2c5120();while(!![]){try{const _0x2acc8f=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x2c5120,_0xa08429){const _0x23624a=_0x5dcf,_0x2f6767=_0x2c5120();while(!![]){try{const _0x2acc8f=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x2c5120,_0xa08429){const _0x23624a=_0x5dcf,_0x2f6767=_0x2c5120();while(!![]){try{const _0x2acc8f=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x2c5120,_0xa08429){const _0x23624a=_0x5dcf,_0x2f6767=_0x2c5120();while(!![]){try{const _0x2acc8f=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x2c5120,_0xa08429){const _0x23624a=_0x5dcf,_0x2f6767=_0x2c5120();while(!![]){try{const _0x2acc8f=-parseInt(_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.15

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x44a4b6=_0x50f2;(function(_0x27c7f2,_0x1cedbd){const _0xef50b1=_0x50f2,_0x434335=_0x27c7f2();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x44a4b6=_0x50f2;(function(_0x27c7f2,_0x1cedbd){const _0xef50b1=_0x50f2,_0x434335=_0x27c7f2();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x44a4b6=_0x50f2;(function(_0x27c7f2,_0x1cedbd){const _0xef50b1=_0x50f2,_0x434335=_0x27c7f2();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x2edeaf=_0x595d;(function(_0x5e4714,_0x2259ea){const _0x5e179b=_0x595d,_0x5e36f6=_0x5e4714();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2edeaf=_0x595d;(function(_0x5e4714,_0x2259ea){const _0x5e179b=_0x595d,_0x5e36f6=_0x5e4714();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2edeaf=_0x595d;(function(_0x5e4714,_0x2259ea){const _0x5e179b=_0x595d,_0x5e36f6=_0x5e4714();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x1725e8,_0x4f5401){const _0x307d3e=_0x4f72,_0x16f775=_0x1725e8();while(!![]){try{const _0x541ab3=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1725e8,_0x4f5401){const _0x307d3e=_0x4f72,_0x16f775=_0x1725e8();while(!![]){try{const _0x541ab3=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1725e8,_0x4f5401){const _0x307d3e=_0x4f72,_0x16f775=_0x1725e8();while(!![]){try{const _0x541ab3=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1725e8,_0x4f5401){const _0x307d3e=_0x4f72,_0x16f775=_0x1725e8();while(!![]){try{const _0x541ab3=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1725e8,_0x4f5401){const _0x307d3e=_0x4f72,_0x16f775=_0x1725e8();while(!![]){try{const _0x541ab3=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1725e8,_0x4f5401){const _0x307d3e=_0x4f72,_0x16f775=_0x1725e8();while(!![]){try{const _0x541ab3=parseInt(_0

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.14

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x53b08e=_0x6c99;(function(_0x3c5d8e,_0x55a844){const _0x43b9de=_0x6c99,_0x471fb0=_0x3c5d8e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x53b08e=_0x6c99;(function(_0x3c5d8e,_0x55a844){const _0x43b9de=_0x6c99,_0x471fb0=_0x3c5d8e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x53b08e=_0x6c99;(function(_0x3c5d8e,_0x55a844){const _0x43b9de=_0x6c99,_0x471fb0=_0x3c5d8e();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x46ec3f=_0x4c32;(function(_0x40cb16,_0x12cb52){const _0x3ab5a9=_0x4c32,_0x2d7296=_0x40cb16();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x46ec3f=_0x4c32;(function(_0x40cb16,_0x12cb52){const _0x3ab5a9=_0x4c32,_0x2d7296=_0x40cb16();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x46ec3f=_0x4c32;(function(_0x40cb16,_0x12cb52){const _0x3ab5a9=_0x4c32,_0x2d7296=_0x40cb16();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x53a3(_0x1b87ee,_0x19d2ab){const _0x4f799e=_0x4f79();return _0x53a3=function(_0x53a3ae,_0x5caf70){_0x53a3ae=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x53a3(_0x1b87ee,_0x19d2ab){const _0x4f799e=_0x4f79();return _0x53a3=function(_0x53a3ae,_0x5caf70){_0x53a3ae=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x53a3(_0x1b87ee,_0x19d2ab){const _0x4f799e=_0x4f79();return _0x53a3=function(_0x53a3ae,_0x5caf70){_0x53a3ae=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x53a3(_0x1b87ee,_0x19d2ab){const _0x4f799e=_0x4f79();return _0x53a3=function(_0x53a3ae,_0x5caf70){_0x53a3ae=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x53a3(_0x1b87ee,_0x19d2ab){const _0x4f799e=_0x4f79();return _0x53a3=function(_0x53a3ae,_0x5caf70){_0x53a3ae=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x53a3(_0x1b87ee,_0x19d2ab){const _0x4f799e=_0x4f79();return _0x53a3=function(_0x53a3ae,_0x5caf70){_0x53a3ae=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.13

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x409c64=_0x53bb;(function(_0x2209d7,_0x41f6a9){const _0x2920f1=_0x53bb,_0x3fbf68=_0x2209d7();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x409c64=_0x53bb;(function(_0x2209d7,_0x41f6a9){const _0x2920f1=_0x53bb,_0x3fbf68=_0x2209d7();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x409c64=_0x53bb;(function(_0x2209d7,_0x41f6a9){const _0x2920f1=_0x53bb,_0x3fbf68=_0x2209d7();while(

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x4435a0=_0x2aad;function _0x5677(){const _0x5a1263=['pluginName','exchange-client.operation.export-docx','Ready'

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x4435a0=_0x2aad;function _0x5677(){const _0x5a1263=['pluginName','exchange-client.operation.export-docx','Ready'

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x4435a0=_0x2aad;function _0x5677(){const _0x5a1263=['pluginName','exchange-client.operation.export-docx','Ready'

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x1cdc05,_0xef365e){const _0x1144aa=_0x4878,_0x222472=_0x1cdc05();while(!![]){try{const _0x34dcef=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1cdc05,_0xef365e){const _0x1144aa=_0x4878,_0x222472=_0x1cdc05();while(!![]){try{const _0x34dcef=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1cdc05,_0xef365e){const _0x1144aa=_0x4878,_0x222472=_0x1cdc05();while(!![]){try{const _0x34dcef=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1cdc05,_0xef365e){const _0x1144aa=_0x4878,_0x222472=_0x1cdc05();while(!![]){try{const _0x34dcef=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1cdc05,_0xef365e){const _0x1144aa=_0x4878,_0x222472=_0x1cdc05();while(!![]){try{const _0x34dcef=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x1cdc05,_0xef365e){const _0x1144aa=_0x4878,_0x222472=_0x1cdc05();while(!![]){try{const _0x34dcef=parseInt(_0

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.12

13 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x5d3106=_0x7527;(function(_0x3c08aa,_0x4f107b){const _0x19ba31=_0x7527,_0x207371=_0x3c08aa();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5d3106=_0x7527;(function(_0x3c08aa,_0x4f107b){const _0x19ba31=_0x7527,_0x207371=_0x3c08aa();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5d3106=_0x7527;(function(_0x3c08aa,_0x4f107b){const _0x19ba31=_0x7527,_0x207371=_0x3c08aa();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x5ab593=_0xba7b;(function(_0x14bd98,_0x1cd5fe){const _0x148085=_0xba7b,_0x509c76=_0x14bd98();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5ab593=_0xba7b;(function(_0x14bd98,_0x1cd5fe){const _0x148085=_0xba7b,_0x509c76=_0x14bd98();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5ab593=_0xba7b;(function(_0x14bd98,_0x1cd5fe){const _0x148085=_0xba7b,_0x509c76=_0x14bd98();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x25a9(_0x43f095,_0x491b53){const _0x54f2ac=_0x54f2();return _0x25a9=function(_0x25a950,_0x48bf7a){_0x25a950=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x25a9(_0x43f095,_0x491b53){const _0x54f2ac=_0x54f2();return _0x25a9=function(_0x25a950,_0x48bf7a){_0x25a950=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x25a9(_0x43f095,_0x491b53){const _0x54f2ac=_0x54f2();return _0x25a9=function(_0x25a950,_0x48bf7a){_0x25a950=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x25a9(_0x43f095,_0x491b53){const _0x54f2ac=_0x54f2();return _0x25a9=function(_0x25a950,_0x48bf7a){_0x25a950=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x25a9(_0x43f095,_0x491b53){const _0x54f2ac=_0x54f2();return _0x25a9=function(_0x25a950,_0x48bf7a){_0x25a950=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x25a9(_0x43f095,_0x491b53){const _0x54f2ac=_0x54f2();return _0x25a9=function(_0x25a950,_0x48bf7a){_0x25a950=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.11

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x1d1d55=_0x29c8;(function(_0xb43f52,_0x34e1e1){var _0x46ce0a=_0x29c8,_0x4831e7=_0xb43f52();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1d1d55=_0x29c8;(function(_0xb43f52,_0x34e1e1){var _0x46ce0a=_0x29c8,_0x4831e7=_0xb43f52();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1d1d55=_0x29c8;(function(_0xb43f52,_0x34e1e1){var _0x46ce0a=_0x29c8,_0x4831e7=_0xb43f52();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x52719a=_0x5383;(function(_0x54e115,_0x3cabdb){var _0x45662e=_0x5383,_0x2fa9c0=_0x54e115();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x52719a=_0x5383;(function(_0x54e115,_0x3cabdb){var _0x45662e=_0x5383,_0x2fa9c0=_0x54e115();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x52719a=_0x5383;(function(_0x54e115,_0x3cabdb){var _0x45662e=_0x5383,_0x2fa9c0=_0x54e115();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xd221(_0x3a5790,_0x2c8e3b){var _0x42de39=_0x42de();return _0xd221=function(_0xd221cc,_0x3e61f6){_0xd221cc=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xd221(_0x3a5790,_0x2c8e3b){var _0x42de39=_0x42de();return _0xd221=function(_0xd221cc,_0x3e61f6){_0xd221cc=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0xd221(_0x3a5790,_0x2c8e3b){var _0x42de39=_0x42de();return _0xd221=function(_0xd221cc,_0x3e61f6){_0xd221cc=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xd221(_0x3a5790,_0x2c8e3b){var _0x42de39=_0x42de();return _0xd221=function(_0xd221cc,_0x3e61f6){_0xd221cc=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xd221(_0x3a5790,_0x2c8e3b){var _0x42de39=_0x42de();return _0xd221=function(_0xd221cc,_0x3e61f6){_0xd221cc=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.10

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x3b0b25=_0xdac0;(function(_0x28f06e,_0x457e9e){var _0x2ea4fc=_0xdac0,_0x209c29=_0x28f06e();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x3b0b25=_0xdac0;(function(_0x28f06e,_0x457e9e){var _0x2ea4fc=_0xdac0,_0x209c29=_0x28f06e();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x3b0b25=_0xdac0;(function(_0x28f06e,_0x457e9e){var _0x2ea4fc=_0xdac0,_0x209c29=_0x28f06e();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0xf1b538=_0x1d80;(function(_0x5a49f8,_0x425059){var _0x3f05ee=_0x1d80,_0x1bba74=_0x5a49f8();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xf1b538=_0x1d80;(function(_0x5a49f8,_0x425059){var _0x3f05ee=_0x1d80,_0x1bba74=_0x5a49f8();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xf1b538=_0x1d80;(function(_0x5a49f8,_0x425059){var _0x3f05ee=_0x1d80,_0x1bba74=_0x5a49f8();while(!![]){try{var _0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x4a16bc,_0x5a21de){var _0x262613=_0x23c1,_0x2db4b5=_0x4a16bc();while(!![]){try{var _0x2c75d8=parseInt(_0x262

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4a16bc,_0x5a21de){var _0x262613=_0x23c1,_0x2db4b5=_0x4a16bc();while(!![]){try{var _0x2c75d8=parseInt(_0x262

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4a16bc,_0x5a21de){var _0x262613=_0x23c1,_0x2db4b5=_0x4a16bc();while(!![]){try{var _0x2c75d8=parseInt(_0x262

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4a16bc,_0x5a21de){var _0x262613=_0x23c1,_0x2db4b5=_0x4a16bc();while(!![]){try{var _0x2c75d8=parseInt(_0x262

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4a16bc,_0x5a21de){var _0x262613=_0x23c1,_0x2db4b5=_0x4a16bc();while(!![]){try{var _0x2c75d8=parseInt(_0x262

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.9

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x1d33bc=_0x2cb6;(function(_0x45b11a,_0x2d9ad8){var _0x2886a8=_0x2cb6,_0x27996d=_0x45b11a();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1d33bc=_0x2cb6;(function(_0x45b11a,_0x2d9ad8){var _0x2886a8=_0x2cb6,_0x27996d=_0x45b11a();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x1d33bc=_0x2cb6;(function(_0x45b11a,_0x2d9ad8){var _0x2886a8=_0x2cb6,_0x27996d=_0x45b11a();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x555fa4=_0x2591;(function(_0x360a74,_0x3240fc){var _0x3bbcd6=_0x2591,_0x4e5011=_0x360a74();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x555fa4=_0x2591;(function(_0x360a74,_0x3240fc){var _0x3bbcd6=_0x2591,_0x4e5011=_0x360a74();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x555fa4=_0x2591;(function(_0x360a74,_0x3240fc){var _0x3bbcd6=_0x2591,_0x4e5011=_0x360a74();while(!![]){try{var _0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x374b1a,_0x2868be){var _0x8d1d14=_0x5f3b,_0x5859c9=_0x374b1a();while(!![]){try{var _0x48805a=-parseInt(_0x8d

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x374b1a,_0x2868be){var _0x8d1d14=_0x5f3b,_0x5859c9=_0x374b1a();while(!![]){try{var _0x48805a=-parseInt(_0x8d

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x374b1a,_0x2868be){var _0x8d1d14=_0x5f3b,_0x5859c9=_0x374b1a();while(!![]){try{var _0x48805a=-parseInt(_0x8d

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x374b1a,_0x2868be){var _0x8d1d14=_0x5f3b,_0x5859c9=_0x374b1a();while(!![]){try{var _0x48805a=-parseInt(_0x8d

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x374b1a,_0x2868be){var _0x8d1d14=_0x5f3b,_0x5859c9=_0x374b1a();while(!![]){try{var _0x48805a=-parseInt(_0x8d

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.8

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x15d9ad=_0x188a;(function(_0x1a0326,_0x11e0c2){var _0x4182be=_0x188a,_0x6db8d0=_0x1a0326();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x15d9ad=_0x188a;(function(_0x1a0326,_0x11e0c2){var _0x4182be=_0x188a,_0x6db8d0=_0x1a0326();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x15d9ad=_0x188a;(function(_0x1a0326,_0x11e0c2){var _0x4182be=_0x188a,_0x6db8d0=_0x1a0326();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0xe56638=_0x3a4e;(function(_0x386ead,_0x3857cd){var _0x3d9f5c=_0x3a4e,_0xaa5364=_0x386ead();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xe56638=_0x3a4e;(function(_0x386ead,_0x3857cd){var _0x3d9f5c=_0x3a4e,_0xaa5364=_0x386ead();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xe56638=_0x3a4e;(function(_0x386ead,_0x3857cd){var _0x3d9f5c=_0x3a4e,_0xaa5364=_0x386ead();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2226(_0x3e31c6,_0x3ad3fc){var _0x3c85bd=_0x3c85();return _0x2226=function(_0x222642,_0x25f49f){_0x222642=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x2226(_0x3e31c6,_0x3ad3fc){var _0x3c85bd=_0x3c85();return _0x2226=function(_0x222642,_0x25f49f){_0x222642=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2226(_0x3e31c6,_0x3ad3fc){var _0x3c85bd=_0x3c85();return _0x2226=function(_0x222642,_0x25f49f){_0x222642=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2226(_0x3e31c6,_0x3ad3fc){var _0x3c85bd=_0x3c85();return _0x2226=function(_0x222642,_0x25f49f){_0x222642=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2226(_0x3e31c6,_0x3ad3fc){var _0x3c85bd=_0x3c85();return _0x2226=function(_0x222642,_0x25f49f){_0x222642=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.7

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x518403=_0x2408;(function(_0x1e3869,_0x10b29c){var _0x5c1af3=_0x2408,_0x140def=_0x1e3869();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x518403=_0x2408;(function(_0x1e3869,_0x10b29c){var _0x5c1af3=_0x2408,_0x140def=_0x1e3869();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x518403=_0x2408;(function(_0x1e3869,_0x10b29c){var _0x5c1af3=_0x2408,_0x140def=_0x1e3869();while(!![]

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x381953=_0x2adf;function _0x2adf(_0x203f31,_0x5e22d8){var _0x365f50=_0x365f();return _0x2adf=function(_0x2adfef,_0

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x381953=_0x2adf;function _0x2adf(_0x203f31,_0x5e22d8){var _0x365f50=_0x365f();return _0x2adf=function(_0x2adfef,_0

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x381953=_0x2adf;function _0x2adf(_0x203f31,_0x5e22d8){var _0x365f50=_0x365f();return _0x2adf=function(_0x2adfef,_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5e4a(_0x16c6b1,_0x107c0d){var _0x28034b=_0x2803();return _0x5e4a=function(_0x5e4af3,_0x267498){_0x5e4af3=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x5e4a(_0x16c6b1,_0x107c0d){var _0x28034b=_0x2803();return _0x5e4a=function(_0x5e4af3,_0x267498){_0x5e4af3=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5e4a(_0x16c6b1,_0x107c0d){var _0x28034b=_0x2803();return _0x5e4a=function(_0x5e4af3,_0x267498){_0x5e4af3=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5e4a(_0x16c6b1,_0x107c0d){var _0x28034b=_0x2803();return _0x5e4a=function(_0x5e4af3,_0x267498){_0x5e4af3=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5e4a(_0x16c6b1,_0x107c0d){var _0x28034b=_0x2803();return _0x5e4a=function(_0x5e4af3,_0x267498){_0x5e4af3=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.6

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x301ed3=_0x2e0b;(function(_0x591883,_0x3ac9f1){var _0x18bfbc=_0x2e0b,_0x1118bc=_0x591883();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x301ed3=_0x2e0b;(function(_0x591883,_0x3ac9f1){var _0x18bfbc=_0x2e0b,_0x1118bc=_0x591883();while(!![]

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x301ed3=_0x2e0b;(function(_0x591883,_0x3ac9f1){var _0x18bfbc=_0x2e0b,_0x1118bc=_0x591883();while(!![]

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x41e3bf=_0x5977;(function(_0x55f53b,_0x55537a){var _0x4b98e3=_0x5977,_0xc6fdd9=_0x55f53b();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x41e3bf=_0x5977;(function(_0x55f53b,_0x55537a){var _0x4b98e3=_0x5977,_0xc6fdd9=_0x55f53b();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x41e3bf=_0x5977;(function(_0x55f53b,_0x55537a){var _0x4b98e3=_0x5977,_0xc6fdd9=_0x55f53b();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x31cd(_0x452084,_0x250e45){var _0x55712a=_0x5571();return _0x31cd=function(_0x31cdec,_0x9f732d){_0x31cdec=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x31cd(_0x452084,_0x250e45){var _0x55712a=_0x5571();return _0x31cd=function(_0x31cdec,_0x9f732d){_0x31cdec=_0x

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature in CJS bundle; generalizes across versions unless obfuscation is removed.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x31cd(_0x452084,_0x250e45){var _0x55712a=_0x5571();return _0x31cd=function(_0x31cdec,_0x9f732d){_0x31cdec=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x31cd(_0x452084,_0x250e45){var _0x55712a=_0x5571();return _0x31cd=function(_0x31cdec,_0x9f732d){_0x31cdec=_0x

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a legitimate UI component library.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x31cd(_0x452084,_0x250e45){var _0x55712a=_0x5571();return _0x31cd=function(_0x31cdec,_0x9f732d){_0x31cdec=_0x

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.