← Home

@univerjs-pro/sheets-sparkline

sparkline for Univer.

16
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

jikkaihexf00mengshukejiwendellhu95

Keywords

univeruniver-prosheetssparklineplugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:dynamic-require AI (semgrep): Byproduct of obfuscated facade bundle; no hostile target. ai
semgrep semgrep:new-function-constructor AI (semgrep): Obfuscator-generated code in index.js; benign for this package. ai
phantom-deps phantom-dep:@univerjs-pro/license AI (phantom-deps): Same org scope; likely used indirectly via re-exports or type-only imports in the pro license system. ai
semgrep semgrep:obfuscation-hex-functions AI (semgrep): Univer Pro license-protection obfuscation; stable across all versions of this package. ai
semgrep semgrep:obfuscation-while-true AI (semgrep): javascript-obfuscator signature in licensed facade.js; consistent across releases. ai

Versions (showing 16 of 16)

Version Deps Published
0.19.0 3 / 4
0.6.10 3 / 5
0.6.9 3 / 5
0.6.8 3 / 5
0.6.7 3 / 5
0.6.6 3 / 5
0.6.5 3 / 5
0.6.4 3 / 5
0.6.3 3 / 5
0.6.2 3 / 5
0.6.1 3 / 5
0.6.0 3 / 5
0.5.5 3 / 5
0.5.4 3 / 5
0.5.3 3 / 5
0.5.2 3 / 5

v0.6.10

26 findings
HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x48ee(){const _0x750fe5=['@univerjs/sheets','cancel','AddSheetSparklineCommand','42012zMahXV','s

HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';function _0x48ee(){const _0x750fe5=['@univerjs/sheets','cancel','AddSheetSparklineCommand','42012zMahXV','s

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x48ee(){const _0x750fe5=['@univerjs/sheets','cancel','AddSheetSparklineCommand','42012zMahXV','s

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1c893c=_0x4ec9;function _0x2af9(){const _0x85ed00=['RANGE_TYPE','toJSON','nonNumShowAs','sheet.com

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x1c893c=_0x4ec9;function _0x2af9(){const _0x85ed00=['RANGE_TYPE','toJSON','nonNumShowAs','sheet.com

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1c893c=_0x4ec9;function _0x2af9(){const _0x85ed00=['RANGE_TYPE','toJSON','nonNumShowAs','sheet.com

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x1e6a4f=_0x2941;(function(_0x28ef50,_0x524c75){const _0xdfae8b=_0x2941,_0x3d7e7a=_0x28ef50();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1e6a4f=_0x2941;(function(_0x28ef50,_0x524c75){const _0xdfae8b=_0x2941,_0x3d7e7a=_0x28ef50();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1e6a4f=_0x2941;(function(_0x28ef50,_0x524c75){const _0xdfae8b=_0x2941,_0x3d7e7a=_0x28ef50();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x137120=_0x2f20;(function(_0x2d3ae9,_0x2cd154){const _0x348642=_0x2f20,_0x366333=_0x2d3ae9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x137120=_0x2f20;(function(_0x2d3ae9,_0x2cd154){const _0x348642=_0x2f20,_0x366333=_0x2d3ae9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x137120=_0x2f20;(function(_0x2d3ae9,_0x2cd154){const _0x348642=_0x2f20,_0x366333=_0x2d3ae9();while(!![]){try{con

HIGH obfuscation-while-true: lib/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x1e6a4f=_0x2941;(function(_0x28ef50,_0x524c75){const _0xdfae8b=_0x2941,_0x3d7e7a=_0x28ef50();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1e6a4f=_0x2941;(function(_0x28ef50,_0x524c75){const _0xdfae8b=_0x2941,_0x3d7e7a=_0x28ef50();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1e6a4f=_0x2941;(function(_0x28ef50,_0x524c75){const _0xdfae8b=_0x2941,_0x3d7e7a=_0x28ef50();while(!![]){try{con

HIGH obfuscation-while-true: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x137120=_0x2f20;(function(_0x2d3ae9,_0x2cd154){const _0x348642=_0x2f20,_0x366333=_0x2d3ae9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x137120=_0x2f20;(function(_0x2d3ae9,_0x2cd154){const _0x348642=_0x2f20,_0x366333=_0x2d3ae9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x137120=_0x2f20;(function(_0x2d3ae9,_0x2cd154){const _0x348642=_0x2f20,_0x366333=_0x2d3ae9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x169c(){const _0x2e7e2e=['length','@univerjs/sheets','removeSparklineGroup','_workbook','FSparklineGroup','am

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x169c(){const _0x2e7e2e=['length','@univerjs/sheets','removeSparklineGroup','_workbook','FSparklineGroup','am

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x169c(){const _0x2e7e2e=['length','@univerjs/sheets','removeSparklineGroup','_workbook','FSparklineGroup','am

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3854(_0x3c57dd,_0x5aa040){const _0x293c27=_0x293c();return _0x3854=function(_0x385412,_0x563caa){_0x385412=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x3854(_0x3c57dd,_0x5aa040){const _0x293c27=_0x293c();return _0x3854=function(_0x385412,_0x563caa){_0x385412=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3854(_0x3c57dd,_0x5aa040){const _0x293c27=_0x293c();return _0x3854=function(_0x385412,_0x563caa){_0x385412=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3854(_0x3c57dd,_0x5aa040){const _0x293c27=_0x293c();return _0x3854=function(_0x385412,_0x563caa){_0x385412=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.9

26 findings
HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x99f1fc=_0x5141;(function(_0x2e92cc,_0x2efa10){const _0x32a269=_0x5141,_0x3ade33=_0x2e92cc();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x99f1fc=_0x5141;(function(_0x2e92cc,_0x2efa10){const _0x32a269=_0x5141,_0x3ade33=_0x2e92cc();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x99f1fc=_0x5141;(function(_0x2e92cc,_0x2efa10){const _0x32a269=_0x5141,_0x3ade33=_0x2e92cc();while(

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x2f8a66=_0x5cc3;(function(_0x5163f4,_0x4536aa){const _0x32fdc1=_0x5cc3,_0xf25e65=_0x5163f4();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x2f8a66=_0x5cc3;(function(_0x5163f4,_0x4536aa){const _0x32fdc1=_0x5cc3,_0xf25e65=_0x5163f4();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x2f8a66=_0x5cc3;(function(_0x5163f4,_0x4536aa){const _0x32fdc1=_0x5cc3,_0xf25e65=_0x5163f4();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x103df3=_0x5aea;(function(_0x3edad6,_0x3980c1){const _0x5971b2=_0x5aea,_0x1da9ab=_0x3edad6();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x103df3=_0x5aea;(function(_0x3edad6,_0x3980c1){const _0x5971b2=_0x5aea,_0x1da9ab=_0x3edad6();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x103df3=_0x5aea;(function(_0x3edad6,_0x3980c1){const _0x5971b2=_0x5aea,_0x1da9ab=_0x3edad6();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0xb26bdc=_0x21d7;(function(_0x2a1f4a,_0x4754db){const _0x1411d0=_0x21d7,_0x310d72=_0x2a1f4a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xb26bdc=_0x21d7;(function(_0x2a1f4a,_0x4754db){const _0x1411d0=_0x21d7,_0x310d72=_0x2a1f4a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xb26bdc=_0x21d7;(function(_0x2a1f4a,_0x4754db){const _0x1411d0=_0x21d7,_0x310d72=_0x2a1f4a();while(!![]){try{con

HIGH obfuscation-while-true: lib/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x103df3=_0x5aea;(function(_0x3edad6,_0x3980c1){const _0x5971b2=_0x5aea,_0x1da9ab=_0x3edad6();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x103df3=_0x5aea;(function(_0x3edad6,_0x3980c1){const _0x5971b2=_0x5aea,_0x1da9ab=_0x3edad6();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x103df3=_0x5aea;(function(_0x3edad6,_0x3980c1){const _0x5971b2=_0x5aea,_0x1da9ab=_0x3edad6();while(!![]){try{con

HIGH obfuscation-while-true: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0xb26bdc=_0x21d7;(function(_0x2a1f4a,_0x4754db){const _0x1411d0=_0x21d7,_0x310d72=_0x2a1f4a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xb26bdc=_0x21d7;(function(_0x2a1f4a,_0x4754db){const _0x1411d0=_0x21d7,_0x310d72=_0x2a1f4a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xb26bdc=_0x21d7;(function(_0x2a1f4a,_0x4754db){const _0x1411d0=_0x21d7,_0x310d72=_0x2a1f4a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x10d6(){const _0x588295=['11597504huDPBs','forEach','registerEventHandler','2892006MpXATE','sparklineAnchorMa

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x10d6(){const _0x588295=['11597504huDPBs','forEach','registerEventHandler','2892006MpXATE','sparklineAnchorMa

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x10d6(){const _0x588295=['11597504huDPBs','forEach','registerEventHandler','2892006MpXATE','sparklineAnchorMa

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3a49(){const _0x574fd7=['matrix','endColumn','getSizeOf','firstPoint','asObservable','SetSheetSparklineComma

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3a49(){const _0x574fd7=['matrix','endColumn','getSizeOf','firstPoint','asObservable','SetSheetSparklineComma

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x3a49(){const _0x574fd7=['matrix','endColumn','getSizeOf','firstPoint','asObservable','SetSheetSparklineComma

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3a49(){const _0x574fd7=['matrix','endColumn','getSizeOf','firstPoint','asObservable','SetSheetSparklineComma

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.8

26 findings
HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x1ad3ca=_0x9b6d;(function(_0x273b97,_0x29c388){const _0x5a05c7=_0x9b6d,_0x5ed8c7=_0x273b97();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1ad3ca=_0x9b6d;(function(_0x273b97,_0x29c388){const _0x5a05c7=_0x9b6d,_0x5ed8c7=_0x273b97();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1ad3ca=_0x9b6d;(function(_0x273b97,_0x29c388){const _0x5a05c7=_0x9b6d,_0x5ed8c7=_0x273b97();while(

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0xd82fc=_0xc2df;(function(_0x3604ca,_0x2ffa15){const _0x3072f0=_0xc2df,_0x56ab0c=_0x3604ca();while(!

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0xd82fc=_0xc2df;(function(_0x3604ca,_0x2ffa15){const _0x3072f0=_0xc2df,_0x56ab0c=_0x3604ca();while(!

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0xd82fc=_0xc2df;(function(_0x3604ca,_0x2ffa15){const _0x3072f0=_0xc2df,_0x56ab0c=_0x3604ca();while(!

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0xa1fd1f=_0x5ccf;(function(_0x1266cf,_0x3210a1){const _0x4946ba=_0x5ccf,_0x3a302f=_0x1266cf();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xa1fd1f=_0x5ccf;(function(_0x1266cf,_0x3210a1){const _0x4946ba=_0x5ccf,_0x3a302f=_0x1266cf();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xa1fd1f=_0x5ccf;(function(_0x1266cf,_0x3210a1){const _0x4946ba=_0x5ccf,_0x3a302f=_0x1266cf();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0xa4a0cb=_0x5ddd;(function(_0x161bb5,_0x2a8906){const _0x4744b4=_0x5ddd,_0x2e455e=_0x161bb5();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xa4a0cb=_0x5ddd;(function(_0x161bb5,_0x2a8906){const _0x4744b4=_0x5ddd,_0x2e455e=_0x161bb5();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xa4a0cb=_0x5ddd;(function(_0x161bb5,_0x2a8906){const _0x4744b4=_0x5ddd,_0x2e455e=_0x161bb5();while(!![]){try{con

HIGH obfuscation-while-true: lib/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0xa1fd1f=_0x5ccf;(function(_0x1266cf,_0x3210a1){const _0x4946ba=_0x5ccf,_0x3a302f=_0x1266cf();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xa1fd1f=_0x5ccf;(function(_0x1266cf,_0x3210a1){const _0x4946ba=_0x5ccf,_0x3a302f=_0x1266cf();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xa1fd1f=_0x5ccf;(function(_0x1266cf,_0x3210a1){const _0x4946ba=_0x5ccf,_0x3a302f=_0x1266cf();while(!![]){try{con

HIGH obfuscation-while-true: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0xa4a0cb=_0x5ddd;(function(_0x161bb5,_0x2a8906){const _0x4744b4=_0x5ddd,_0x2e455e=_0x161bb5();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xa4a0cb=_0x5ddd;(function(_0x161bb5,_0x2a8906){const _0x4744b4=_0x5ddd,_0x2e455e=_0x161bb5();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xa4a0cb=_0x5ddd;(function(_0x161bb5,_0x2a8906){const _0x4744b4=_0x5ddd,_0x2e455e=_0x161bb5();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x39d3(_0xa6e32,_0x391073){const _0x352385=_0x3523();return _0x39d3=function(_0x39d317,_0x118a12){_0x39d317=_0

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x39d3(_0xa6e32,_0x391073){const _0x352385=_0x3523();return _0x39d3=function(_0x39d317,_0x118a12){_0x39d317=_0

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x39d3(_0xa6e32,_0x391073){const _0x352385=_0x3523();return _0x39d3=function(_0x39d317,_0x118a12){_0x39d317=_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x182f(_0x21cefa,_0x1d5afb){const _0x5cdbcc=_0x5cdb();return _0x182f=function(_0x182ffe,_0x4bc265){_0x182ffe=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x182f(_0x21cefa,_0x1d5afb){const _0x5cdbcc=_0x5cdb();return _0x182f=function(_0x182ffe,_0x4bc265){_0x182ffe=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x182f(_0x21cefa,_0x1d5afb){const _0x5cdbcc=_0x5cdb();return _0x182f=function(_0x182ffe,_0x4bc265){_0x182ffe=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x182f(_0x21cefa,_0x1d5afb){const _0x5cdbcc=_0x5cdb();return _0x182f=function(_0x182ffe,_0x4bc265){_0x182ffe=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.7

20 findings
HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x214df6=_0x540b;function _0x540b(_0x2a9ecd,_0x527469){const _0x1c5986=_0x1c59();return _0x540b=func

HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x214df6=_0x540b;function _0x540b(_0x2a9ecd,_0x527469){const _0x1c5986=_0x1c59();return _0x540b=func

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x214df6=_0x540b;function _0x540b(_0x2a9ecd,_0x527469){const _0x1c5986=_0x1c59();return _0x540b=func

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0xa51939=_0x17b3;(function(_0xab1e89,_0x805745){const _0x762926=_0x17b3,_0x529e8d=_0xab1e89();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0xa51939=_0x17b3;(function(_0xab1e89,_0x805745){const _0x762926=_0x17b3,_0x529e8d=_0xab1e89();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0xa51939=_0x17b3;(function(_0xab1e89,_0x805745){const _0x762926=_0x17b3,_0x529e8d=_0xab1e89();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x1e3897=_0x5109;(function(_0x17d112,_0x25ed83){const _0x5f48b0=_0x5109,_0x19ae66=_0x17d112();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1e3897=_0x5109;(function(_0x17d112,_0x25ed83){const _0x5f48b0=_0x5109,_0x19ae66=_0x17d112();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1e3897=_0x5109;(function(_0x17d112,_0x25ed83){const _0x5f48b0=_0x5109,_0x19ae66=_0x17d112();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0xe37cc5=_0x43c6;(function(_0x1a152a,_0x4ddf75){const _0x4641ef=_0x43c6,_0xa33dc8=_0x1a152a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xe37cc5=_0x43c6;(function(_0x1a152a,_0x4ddf75){const _0x4641ef=_0x43c6,_0xa33dc8=_0x1a152a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0xe37cc5=_0x43c6;(function(_0x1a152a,_0x4ddf75){const _0x4641ef=_0x43c6,_0xa33dc8=_0x1a152a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x13f6(_0x568046,_0x578bb5){const _0x835d4e=_0x835d();return _0x13f6=function(_0x13f6fb,_0x40299d){_0x13f6fb=_

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x13f6(_0x568046,_0x578bb5){const _0x835d4e=_0x835d();return _0x13f6=function(_0x13f6fb,_0x40299d){_0x13f6fb=_

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x13f6(_0x568046,_0x578bb5){const _0x835d4e=_0x835d();return _0x13f6=function(_0x13f6fb,_0x40299d){_0x13f6fb=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2712(_0x11b7a8,_0x2640c6){const _0x3750dc=_0x3750();return _0x2712=function(_0x2712a9,_0x2931c2){_0x2712a9=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x2712(_0x11b7a8,_0x2640c6){const _0x3750dc=_0x3750();return _0x2712=function(_0x2712a9,_0x2931c2){_0x2712a9=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2712(_0x11b7a8,_0x2640c6){const _0x3750dc=_0x3750();return _0x2712=function(_0x2712a9,_0x2931c2){_0x2712a9=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2712(_0x11b7a8,_0x2640c6){const _0x3750dc=_0x3750();return _0x2712=function(_0x2712a9,_0x2931c2){_0x2712a9=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.6

20 findings
HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x38a464=_0x3bdb;(function(_0x817ade,_0x5b2acb){const _0x11d1c5=_0x3bdb,_0x4f674b=_0x817ade();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x38a464=_0x3bdb;(function(_0x817ade,_0x5b2acb){const _0x11d1c5=_0x3bdb,_0x4f674b=_0x817ade();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x38a464=_0x3bdb;(function(_0x817ade,_0x5b2acb){const _0x11d1c5=_0x3bdb,_0x4f674b=_0x817ade();while(

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x40972e=_0x38e1;(function(_0x5442fb,_0x2748f7){const _0x138e44=_0x38e1,_0x291cc3=_0x5442fb();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x40972e=_0x38e1;(function(_0x5442fb,_0x2748f7){const _0x138e44=_0x38e1,_0x291cc3=_0x5442fb();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x40972e=_0x38e1;(function(_0x5442fb,_0x2748f7){const _0x138e44=_0x38e1,_0x291cc3=_0x5442fb();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x16b3b5=_0x13bd;(function(_0x15baaf,_0x441389){const _0x47ba1c=_0x13bd,_0x45c38d=_0x15baaf();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x16b3b5=_0x13bd;(function(_0x15baaf,_0x441389){const _0x47ba1c=_0x13bd,_0x45c38d=_0x15baaf();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x16b3b5=_0x13bd;(function(_0x15baaf,_0x441389){const _0x47ba1c=_0x13bd,_0x45c38d=_0x15baaf();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5ed7ec=_0xeebe;function _0xeebe(_0xcc8427,_0x5396d5){const _0x552714=_0x5527();return _0xeebe=function(_0xeebec

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x5ed7ec=_0xeebe;function _0xeebe(_0xcc8427,_0x5396d5){const _0x552714=_0x5527();return _0xeebe=function(_0xeebec

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5ed7ec=_0xeebe;function _0xeebe(_0xcc8427,_0x5396d5){const _0x552714=_0x5527();return _0xeebe=function(_0xeebec

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5143(_0x6aa653,_0x710c9f){const _0x3ac5e5=_0x3ac5();return _0x5143=function(_0x514329,_0xbea5b1){_0x514329=_

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x5143(_0x6aa653,_0x710c9f){const _0x3ac5e5=_0x3ac5();return _0x5143=function(_0x514329,_0xbea5b1){_0x514329=_

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5143(_0x6aa653,_0x710c9f){const _0x3ac5e5=_0x3ac5();return _0x5143=function(_0x514329,_0xbea5b1){_0x514329=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5e8b(_0x1de12b,_0x144c25){const _0xb974c2=_0xb974();return _0x5e8b=function(_0x5e8b9d,_0x2c4980){_0x5e8b9d=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5e8b(_0x1de12b,_0x144c25){const _0xb974c2=_0xb974();return _0x5e8b=function(_0x5e8b9d,_0x2c4980){_0x5e8b9d=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x5e8b(_0x1de12b,_0x144c25){const _0xb974c2=_0xb974();return _0x5e8b=function(_0x5e8b9d,_0x2c4980){_0x5e8b9d=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5e8b(_0x1de12b,_0x144c25){const _0xb974c2=_0xb974();return _0x5e8b=function(_0x5e8b9d,_0x2c4980){_0x5e8b9d=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.5

20 findings
HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x4091a1=_0x4621;(function(_0x4f45a2,_0x412d0b){const _0x418124=_0x4621,_0x48e450=_0x4f45a2();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x4091a1=_0x4621;(function(_0x4f45a2,_0x412d0b){const _0x418124=_0x4621,_0x48e450=_0x4f45a2();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x4091a1=_0x4621;(function(_0x4f45a2,_0x412d0b){const _0x418124=_0x4621,_0x48e450=_0x4f45a2();while(

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x17c50e=_0x1740;(function(_0x3c98f9,_0x5ef434){const _0x4e41b5=_0x1740,_0x24ac65=_0x3c98f9();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x17c50e=_0x1740;(function(_0x3c98f9,_0x5ef434){const _0x4e41b5=_0x1740,_0x24ac65=_0x3c98f9();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x17c50e=_0x1740;(function(_0x3c98f9,_0x5ef434){const _0x4e41b5=_0x1740,_0x24ac65=_0x3c98f9();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x79d9dc=_0x2a75;(function(_0x210f48,_0x4bc6d3){const _0x5cf621=_0x2a75,_0x59f791=_0x210f48();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x79d9dc=_0x2a75;(function(_0x210f48,_0x4bc6d3){const _0x5cf621=_0x2a75,_0x59f791=_0x210f48();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x79d9dc=_0x2a75;(function(_0x210f48,_0x4bc6d3){const _0x5cf621=_0x2a75,_0x59f791=_0x210f48();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x46dc97=_0x34e5;(function(_0x53341e,_0x2d1d9a){const _0x14da48=_0x34e5,_0x5897a2=_0x53341e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x46dc97=_0x34e5;(function(_0x53341e,_0x2d1d9a){const _0x14da48=_0x34e5,_0x5897a2=_0x53341e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x46dc97=_0x34e5;(function(_0x53341e,_0x2d1d9a){const _0x14da48=_0x34e5,_0x5897a2=_0x53341e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x46d5(){const _0xd98a57=['_groupId','SheetsSelectionsService','_worksheet','getOwnPropertyDescriptor','Tools'

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x46d5(){const _0xd98a57=['_groupId','SheetsSelectionsService','_worksheet','getOwnPropertyDescriptor','Tools'

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x46d5(){const _0xd98a57=['_groupId','SheetsSelectionsService','_worksheet','getOwnPropertyDescriptor','Tools'

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x221f(_0x4c2227,_0x351183){const _0x4f8e44=_0x4f8e();return _0x221f=function(_0x221fe7,_0x228706){_0x221fe7=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x221f(_0x4c2227,_0x351183){const _0x4f8e44=_0x4f8e();return _0x221f=function(_0x221fe7,_0x228706){_0x221fe7=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x221f(_0x4c2227,_0x351183){const _0x4f8e44=_0x4f8e();return _0x221f=function(_0x221fe7,_0x228706){_0x221fe7=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x221f(_0x4c2227,_0x351183){const _0x4f8e44=_0x4f8e();return _0x221f=function(_0x221fe7,_0x228706){_0x221fe7=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.4

20 findings
HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x1e711c=_0x1592;(function(_0x3df1b8,_0x58ab46){const _0xca9d32=_0x1592,_0x2fc75d=_0x3df1b8();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1e711c=_0x1592;(function(_0x3df1b8,_0x58ab46){const _0xca9d32=_0x1592,_0x2fc75d=_0x3df1b8();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1e711c=_0x1592;(function(_0x3df1b8,_0x58ab46){const _0xca9d32=_0x1592,_0x2fc75d=_0x3df1b8();while(

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x988d77=_0x21c9;(function(_0x58f08e,_0x46a5b2){const _0x1dc2fb=_0x21c9,_0x1010f6=_0x58f08e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x988d77=_0x21c9;(function(_0x58f08e,_0x46a5b2){const _0x1dc2fb=_0x21c9,_0x1010f6=_0x58f08e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x988d77=_0x21c9;(function(_0x58f08e,_0x46a5b2){const _0x1dc2fb=_0x21c9,_0x1010f6=_0x58f08e();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x4bce2f=_0x2741;(function(_0x401b51,_0x43ecb4){const _0x2b39f6=_0x2741,_0x31633f=_0x401b51();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x4bce2f=_0x2741;(function(_0x401b51,_0x43ecb4){const _0x2b39f6=_0x2741,_0x31633f=_0x401b51();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x4bce2f=_0x2741;(function(_0x401b51,_0x43ecb4){const _0x2b39f6=_0x2741,_0x31633f=_0x401b51();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x526a21=_0x3e0e;(function(_0x14bf80,_0x5bc547){const _0x1d0d9e=_0x3e0e,_0x27ceeb=_0x14bf80();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x526a21=_0x3e0e;(function(_0x14bf80,_0x5bc547){const _0x1d0d9e=_0x3e0e,_0x27ceeb=_0x14bf80();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x526a21=_0x3e0e;(function(_0x14bf80,_0x5bc547){const _0x1d0d9e=_0x3e0e,_0x27ceeb=_0x14bf80();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x8959(){const _0x4ac00f=['1106208CyLLDt','FWorksheet','createInstance','_row','SheetSparklineChanged','functi

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x8959(){const _0x4ac00f=['1106208CyLLDt','FWorksheet','createInstance','_row','SheetSparklineChanged','functi

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x8959(){const _0x4ac00f=['1106208CyLLDt','FWorksheet','createInstance','_row','SheetSparklineChanged','functi

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xc158(_0x3fb589,_0x176d59){const _0x48852d=_0x4885();return _0xc158=function(_0xc158d3,_0x4108f8){_0xc158d3=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0xc158(_0x3fb589,_0x176d59){const _0x48852d=_0x4885();return _0xc158=function(_0xc158d3,_0x4108f8){_0xc158d3=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xc158(_0x3fb589,_0x176d59){const _0x48852d=_0x4885();return _0xc158=function(_0xc158d3,_0x4108f8){_0xc158d3=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xc158(_0x3fb589,_0x176d59){const _0x48852d=_0x4885();return _0xc158=function(_0xc158d3,_0x4108f8){_0xc158d3=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.3

20 findings
HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x5338e9=_0x4b2a;(function(_0x295a40,_0x2f7a7e){const _0x3cbb03=_0x4b2a,_0x3d482b=_0x295a40();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5338e9=_0x4b2a;(function(_0x295a40,_0x2f7a7e){const _0x3cbb03=_0x4b2a,_0x3d482b=_0x295a40();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5338e9=_0x4b2a;(function(_0x295a40,_0x2f7a7e){const _0x3cbb03=_0x4b2a,_0x3d482b=_0x295a40();while(

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x518de0=_0x27a9;(function(_0x157b8e,_0x3889d2){const _0x5d180d=_0x27a9,_0x5424be=_0x157b8e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x518de0=_0x27a9;(function(_0x157b8e,_0x3889d2){const _0x5d180d=_0x27a9,_0x5424be=_0x157b8e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x518de0=_0x27a9;(function(_0x157b8e,_0x3889d2){const _0x5d180d=_0x27a9,_0x5424be=_0x157b8e();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x2d1afc=_0x19a4;(function(_0x11a421,_0x443375){const _0x2c7660=_0x19a4,_0x209131=_0x11a421();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2d1afc=_0x19a4;(function(_0x11a421,_0x443375){const _0x2c7660=_0x19a4,_0x209131=_0x11a421();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2d1afc=_0x19a4;(function(_0x11a421,_0x443375){const _0x2c7660=_0x19a4,_0x209131=_0x11a421();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x56d897=_0x30c8;function _0x30c8(_0x33a7ee,_0x277c82){const _0x243649=_0x2436();return _0x30c8=function(_0x30c8b

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x56d897=_0x30c8;function _0x30c8(_0x33a7ee,_0x277c82){const _0x243649=_0x2436();return _0x30c8=function(_0x30c8b

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x56d897=_0x30c8;function _0x30c8(_0x33a7ee,_0x277c82){const _0x243649=_0x2436();return _0x30c8=function(_0x30c8b

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x206f(_0x35c59a,_0x254726){const _0x5e14dc=_0x5e14();return _0x206f=function(_0x206f4a,_0x3ca91d){_0x206f4a=_

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x206f(_0x35c59a,_0x254726){const _0x5e14dc=_0x5e14();return _0x206f=function(_0x206f4a,_0x3ca91d){_0x206f4a=_

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x206f(_0x35c59a,_0x254726){const _0x5e14dc=_0x5e14();return _0x206f=function(_0x206f4a,_0x3ca91d){_0x206f4a=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x452e(){const _0xa3f618=['asObservable','registerCommand','hasValue','UniverLicensePlugin','SpacialShowAsEnum

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x452e(){const _0xa3f618=['asObservable','registerCommand','hasValue','UniverLicensePlugin','SpacialShowAsEnum

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x452e(){const _0xa3f618=['asObservable','registerCommand','hasValue','UniverLicensePlugin','SpacialShowAsEnum

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x452e(){const _0xa3f618=['asObservable','registerCommand','hasValue','UniverLicensePlugin','SpacialShowAsEnum

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.2

20 findings
HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x21bc(){const _0x52f761=['SparklineDataSourceModel','FWorksheet','getSparklineGroupByCell','20Sk

HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';function _0x21bc(){const _0x52f761=['SparklineDataSourceModel','FWorksheet','getSparklineGroupByCell','20Sk

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x21bc(){const _0x52f761=['SparklineDataSourceModel','FWorksheet','getSparklineGroupByCell','20Sk

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x15da23=_0x236d;(function(_0x18d81b,_0x3065e1){const _0x113134=_0x236d,_0x5b7368=_0x18d81b();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x15da23=_0x236d;(function(_0x18d81b,_0x3065e1){const _0x113134=_0x236d,_0x5b7368=_0x18d81b();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x15da23=_0x236d;(function(_0x18d81b,_0x3065e1){const _0x113134=_0x236d,_0x5b7368=_0x18d81b();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x1c871b=_0x22fa;(function(_0x4491e2,_0x33ed9c){const _0x55a00e=_0x22fa,_0x1f107e=_0x4491e2();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1c871b=_0x22fa;(function(_0x4491e2,_0x33ed9c){const _0x55a00e=_0x22fa,_0x1f107e=_0x4491e2();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1c871b=_0x22fa;(function(_0x4491e2,_0x33ed9c){const _0x55a00e=_0x22fa,_0x1f107e=_0x4491e2();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x5db932=_0x5800;(function(_0x4747f0,_0x3ce2ec){const _0x5b9cb8=_0x5800,_0x158506=_0x4747f0();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5db932=_0x5800;(function(_0x4747f0,_0x3ce2ec){const _0x5b9cb8=_0x5800,_0x158506=_0x4747f0();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5db932=_0x5800;(function(_0x4747f0,_0x3ce2ec){const _0x5b9cb8=_0x5800,_0x158506=_0x4747f0();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x30d4(){const _0x8adb72=['startRow','sparklineAnchorMap','changeDataSource','3EEyKpV','SparklineTypeEnum','Un

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x30d4(){const _0x8adb72=['startRow','sparklineAnchorMap','changeDataSource','3EEyKpV','SparklineTypeEnum','Un

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x30d4(){const _0x8adb72=['startRow','sparklineAnchorMap','changeDataSource','3EEyKpV','SparklineTypeEnum','Un

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x261c(){const _0x25a9d4=['setAlpha','adjustRangeOnMutation','custom','_sparklineAnchorMap','removeColumns','8

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x261c(){const _0x25a9d4=['setAlpha','adjustRangeOnMutation','custom','_sparklineAnchorMap','removeColumns','8

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x261c(){const _0x25a9d4=['setAlpha','adjustRangeOnMutation','custom','_sparklineAnchorMap','removeColumns','8

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x261c(){const _0x25a9d4=['setAlpha','adjustRangeOnMutation','custom','_sparklineAnchorMap','removeColumns','8

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.1

20 findings
HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x4afe(_0x1cb105,_0x4ba416){const _0x492b0c=_0x492b();return _0x4afe=function(_0x4afe27,_0x5d7e5c

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x4afe(_0x1cb105,_0x4ba416){const _0x492b0c=_0x492b();return _0x4afe=function(_0x4afe27,_0x5d7e5c

HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';function _0x4afe(_0x1cb105,_0x4ba416){const _0x492b0c=_0x492b();return _0x4afe=function(_0x4afe27,_0x5d7e5c

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x1c8839=_0x1611;(function(_0x250bf5,_0x36e749){const _0x124845=_0x1611,_0x363127=_0x250bf5();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1c8839=_0x1611;(function(_0x250bf5,_0x36e749){const _0x124845=_0x1611,_0x363127=_0x250bf5();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1c8839=_0x1611;(function(_0x250bf5,_0x36e749){const _0x124845=_0x1611,_0x363127=_0x250bf5();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x22abf2=_0x24a4;(function(_0x99a7c9,_0xa8d1bb){const _0x1669dd=_0x24a4,_0x59f282=_0x99a7c9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x22abf2=_0x24a4;(function(_0x99a7c9,_0xa8d1bb){const _0x1669dd=_0x24a4,_0x59f282=_0x99a7c9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x22abf2=_0x24a4;(function(_0x99a7c9,_0xa8d1bb){const _0x1669dd=_0x24a4,_0x59f282=_0x99a7c9();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x160b34=_0x126f;(function(_0x103a63,_0x25f445){const _0x3634c7=_0x126f,_0x2b24e3=_0x103a63();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x160b34=_0x126f;(function(_0x103a63,_0x25f445){const _0x3634c7=_0x126f,_0x2b24e3=_0x103a63();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x160b34=_0x126f;(function(_0x103a63,_0x25f445){const _0x3634c7=_0x126f,_0x2b24e3=_0x103a63();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5e71(_0x37c8ec,_0x4a8377){const _0x87600a=_0x8760();return _0x5e71=function(_0x5e718e,_0x2bda60){_0x5e718e=_

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x5e71(_0x37c8ec,_0x4a8377){const _0x87600a=_0x8760();return _0x5e71=function(_0x5e718e,_0x2bda60){_0x5e718e=_

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5e71(_0x37c8ec,_0x4a8377){const _0x87600a=_0x8760();return _0x5e71=function(_0x5e718e,_0x2bda60){_0x5e718e=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x30bd(_0x561fad,_0x4cd918){const _0x33e043=_0x33e0();return _0x30bd=function(_0x30bd9e,_0x4d80e8){_0x30bd9e=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x30bd(_0x561fad,_0x4cd918){const _0x33e043=_0x33e0();return _0x30bd=function(_0x30bd9e,_0x4d80e8){_0x30bd9e=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x30bd(_0x561fad,_0x4cd918){const _0x33e043=_0x33e0();return _0x30bd=function(_0x30bd9e,_0x4d80e8){_0x30bd9e=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x30bd(_0x561fad,_0x4cd918){const _0x33e043=_0x33e0();return _0x30bd=function(_0x30bd9e,_0x4d80e8){_0x30bd9e=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.0

20 findings
HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x444951=_0x3c4e;(function(_0x5989a8,_0x3a48c3){const _0x40ebec=_0x3c4e,_0x1f2afe=_0x5989a8();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x444951=_0x3c4e;(function(_0x5989a8,_0x3a48c3){const _0x40ebec=_0x3c4e,_0x1f2afe=_0x5989a8();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x444951=_0x3c4e;(function(_0x5989a8,_0x3a48c3){const _0x40ebec=_0x3c4e,_0x1f2afe=_0x5989a8();while(

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x212c29=_0x1385;(function(_0x1e0da8,_0x1df868){const _0x50d1ba=_0x1385,_0x38f6e4=_0x1e0da8();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x212c29=_0x1385;(function(_0x1e0da8,_0x1df868){const _0x50d1ba=_0x1385,_0x38f6e4=_0x1e0da8();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x212c29=_0x1385;(function(_0x1e0da8,_0x1df868){const _0x50d1ba=_0x1385,_0x38f6e4=_0x1e0da8();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x2a654a=_0x8714;(function(_0x18766a,_0x4e5775){const _0x4b8be7=_0x8714,_0x13bc38=_0x18766a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2a654a=_0x8714;(function(_0x18766a,_0x4e5775){const _0x4b8be7=_0x8714,_0x13bc38=_0x18766a();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2a654a=_0x8714;(function(_0x18766a,_0x4e5775){const _0x4b8be7=_0x8714,_0x13bc38=_0x18766a();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x3e9776=_0x508b;(function(_0x3b9856,_0x50ca77){const _0x34357b=_0x508b,_0x4baed4=_0x3b9856();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3e9776=_0x508b;(function(_0x3b9856,_0x50ca77){const _0x34357b=_0x508b,_0x4baed4=_0x3b9856();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3e9776=_0x508b;(function(_0x3b9856,_0x50ca77){const _0x34357b=_0x508b,_0x4baed4=_0x3b9856();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x5c7c4b,_0x2c36fa){const _0x80d2c3=_0x5bbf,_0x1975b5=_0x5c7c4b();while(!![]){try{const _0x2fdbd9=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5c7c4b,_0x2c36fa){const _0x80d2c3=_0x5bbf,_0x1975b5=_0x5c7c4b();while(!![]){try{const _0x2fdbd9=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5c7c4b,_0x2c36fa){const _0x80d2c3=_0x5bbf,_0x1975b5=_0x5c7c4b();while(!![]){try{const _0x2fdbd9=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x7950(){const _0x532c03=['GROUP_EXTREMUM','cellToRange','sheet.mutation.remove-sparkline','_commandService','

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x7950(){const _0x532c03=['GROUP_EXTREMUM','cellToRange','sheet.mutation.remove-sparkline','_commandService','

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x7950(){const _0x532c03=['GROUP_EXTREMUM','cellToRange','sheet.mutation.remove-sparkline','_commandService','

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x7950(){const _0x532c03=['GROUP_EXTREMUM','cellToRange','sheet.mutation.remove-sparkline','_commandService','

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.5

20 findings
HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x236de8=_0x197a;function _0x197a(_0x353d5b,_0x3e469e){const _0x114147=_0x1141();return _0x197a=func

HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x236de8=_0x197a;function _0x197a(_0x353d5b,_0x3e469e){const _0x114147=_0x1141();return _0x197a=func

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x236de8=_0x197a;function _0x197a(_0x353d5b,_0x3e469e){const _0x114147=_0x1141();return _0x197a=func

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x485530=_0x1692;(function(_0x4d7b0f,_0x381506){const _0x207b98=_0x1692,_0x133d94=_0x4d7b0f();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x485530=_0x1692;(function(_0x4d7b0f,_0x381506){const _0x207b98=_0x1692,_0x133d94=_0x4d7b0f();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x485530=_0x1692;(function(_0x4d7b0f,_0x381506){const _0x207b98=_0x1692,_0x133d94=_0x4d7b0f();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x2db0c2=_0x309a;(function(_0x5adc35,_0x5f9b9a){const _0x42987f=_0x309a,_0x562a7f=_0x5adc35();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2db0c2=_0x309a;(function(_0x5adc35,_0x5f9b9a){const _0x42987f=_0x309a,_0x562a7f=_0x5adc35();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2db0c2=_0x309a;(function(_0x5adc35,_0x5f9b9a){const _0x42987f=_0x309a,_0x562a7f=_0x5adc35();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x2ad801=_0x15e7;(function(_0x5878bd,_0x3f57f6){const _0x1e9a6a=_0x15e7,_0x2bc7ca=_0x5878bd();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2ad801=_0x15e7;(function(_0x5878bd,_0x3f57f6){const _0x1e9a6a=_0x15e7,_0x2bc7ca=_0x5878bd();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2ad801=_0x15e7;(function(_0x5878bd,_0x3f57f6){const _0x1e9a6a=_0x15e7,_0x2bc7ca=_0x5878bd();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x54d8(){const _0x4d74bb=['Event','_injector','FUniver','getSparklineGroupByCell','removeSparkline','Tools','S

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x54d8(){const _0x4d74bb=['Event','_injector','FUniver','getSparklineGroupByCell','removeSparkline','Tools','S

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x54d8(){const _0x4d74bb=['Event','_injector','FUniver','getSparklineGroupByCell','removeSparkline','Tools','S

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0xb8ad8,_0x206093){const _0x42a838=_0x30f0,_0x27dc34=_0xb8ad8();while(!![]){try{const _0x4331df=parseInt(_0x4

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xb8ad8,_0x206093){const _0x42a838=_0x30f0,_0x27dc34=_0xb8ad8();while(!![]){try{const _0x4331df=parseInt(_0x4

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xb8ad8,_0x206093){const _0x42a838=_0x30f0,_0x27dc34=_0xb8ad8();while(!![]){try{const _0x4331df=parseInt(_0x4

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xb8ad8,_0x206093){const _0x42a838=_0x30f0,_0x27dc34=_0xb8ad8();while(!![]){try{const _0x4331df=parseInt(_0x4

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.4

20 findings
HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x487773=_0x2cd2;(function(_0x37c62c,_0x3e3612){const _0x22a0a8=_0x2cd2,_0x96dc26=_0x37c62c();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x487773=_0x2cd2;(function(_0x37c62c,_0x3e3612){const _0x22a0a8=_0x2cd2,_0x96dc26=_0x37c62c();while(

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x487773=_0x2cd2;(function(_0x37c62c,_0x3e3612){const _0x22a0a8=_0x2cd2,_0x96dc26=_0x37c62c();while(

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x48dee6=_0x802f;(function(_0x534170,_0x149b22){const _0x5218e8=_0x802f,_0x5c2b8b=_0x534170();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x48dee6=_0x802f;(function(_0x534170,_0x149b22){const _0x5218e8=_0x802f,_0x5c2b8b=_0x534170();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x48dee6=_0x802f;(function(_0x534170,_0x149b22){const _0x5218e8=_0x802f,_0x5c2b8b=_0x534170();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x3ab2e2=_0x3fd4;(function(_0x19d6b9,_0x1421a3){const _0x5cc95b=_0x3fd4,_0xf9c243=_0x19d6b9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3ab2e2=_0x3fd4;(function(_0x19d6b9,_0x1421a3){const _0x5cc95b=_0x3fd4,_0xf9c243=_0x19d6b9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3ab2e2=_0x3fd4;(function(_0x19d6b9,_0x1421a3){const _0x5cc95b=_0x3fd4,_0xf9c243=_0x19d6b9();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x6f3a42=_0x1307;(function(_0x12193e,_0x4184e9){const _0x2ebccf=_0x1307,_0x2a1ca1=_0x12193e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x6f3a42=_0x1307;(function(_0x12193e,_0x4184e9){const _0x2ebccf=_0x1307,_0x2a1ca1=_0x12193e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x6f3a42=_0x1307;(function(_0x12193e,_0x4184e9){const _0x2ebccf=_0x1307,_0x2a1ca1=_0x12193e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2a14(_0x21741f,_0x1b5245){const _0x473b66=_0x473b();return _0x2a14=function(_0x2a1489,_0x5e4037){_0x2a1489=_

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2a14(_0x21741f,_0x1b5245){const _0x473b66=_0x473b();return _0x2a14=function(_0x2a1489,_0x5e4037){_0x2a1489=_

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x2a14(_0x21741f,_0x1b5245){const _0x473b66=_0x473b();return _0x2a14=function(_0x2a1489,_0x5e4037){_0x2a1489=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x586b61,_0x136473){const _0x248209=_0x2745,_0x1f49af=_0x586b61();while(!![]){try{const _0x32cec9=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x586b61,_0x136473){const _0x248209=_0x2745,_0x1f49af=_0x586b61();while(!![]){try{const _0x32cec9=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x586b61,_0x136473){const _0x248209=_0x2745,_0x1f49af=_0x586b61();while(!![]){try{const _0x32cec9=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x586b61,_0x136473){const _0x248209=_0x2745,_0x1f49af=_0x586b61();while(!![]){try{const _0x32cec9=-parseInt(_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.3

20 findings
HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x52fc25=_0x1920;function _0x1920(_0x267d16,_0x3fd108){const _0x4a7f16=_0x4a7f();return _0x1920=func

HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x52fc25=_0x1920;function _0x1920(_0x267d16,_0x3fd108){const _0x4a7f16=_0x4a7f();return _0x1920=func

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x52fc25=_0x1920;function _0x1920(_0x267d16,_0x3fd108){const _0x4a7f16=_0x4a7f();return _0x1920=func

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x3210c0=_0x3fc2;function _0x3fc2(_0x4f3ad7,_0x307777){const _0x30df2f=_0x30df();return _0x3fc2=func

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x3210c0=_0x3fc2;function _0x3fc2(_0x4f3ad7,_0x307777){const _0x30df2f=_0x30df();return _0x3fc2=func

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x3210c0=_0x3fc2;function _0x3fc2(_0x4f3ad7,_0x307777){const _0x30df2f=_0x30df();return _0x3fc2=func

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x25effb=_0x35df;(function(_0x56d557,_0x409adf){const _0x3f7325=_0x35df,_0x20d42e=_0x56d557();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x25effb=_0x35df;(function(_0x56d557,_0x409adf){const _0x3f7325=_0x35df,_0x20d42e=_0x56d557();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x25effb=_0x35df;(function(_0x56d557,_0x409adf){const _0x3f7325=_0x35df,_0x20d42e=_0x56d557();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x3ef231=_0x10c2;(function(_0x2e1370,_0x2648ce){const _0x23dcf5=_0x10c2,_0x20bbec=_0x2e1370();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3ef231=_0x10c2;(function(_0x2e1370,_0x2648ce){const _0x23dcf5=_0x10c2,_0x20bbec=_0x2e1370();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3ef231=_0x10c2;(function(_0x2e1370,_0x2648ce){const _0x23dcf5=_0x10c2,_0x20bbec=_0x2e1370();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5498(_0x31b0f3,_0x5213f1){const _0x52b2e0=_0x52b2();return _0x5498=function(_0x549840,_0x55f2b6){_0x549840=_

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x5498(_0x31b0f3,_0x5213f1){const _0x52b2e0=_0x52b2();return _0x5498=function(_0x549840,_0x55f2b6){_0x549840=_

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5498(_0x31b0f3,_0x5213f1){const _0x52b2e0=_0x52b2();return _0x5498=function(_0x549840,_0x55f2b6){_0x549840=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x12c6(_0x2c51fc,_0x239a41){const _0x2784eb=_0x2784();return _0x12c6=function(_0x12c6ce,_0x1a56de){_0x12c6ce=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x12c6(_0x2c51fc,_0x239a41){const _0x2784eb=_0x2784();return _0x12c6=function(_0x12c6ce,_0x1a56de){_0x12c6ce=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x12c6(_0x2c51fc,_0x239a41){const _0x2784eb=_0x2784();return _0x12c6=function(_0x12c6ce,_0x1a56de){_0x12c6ce=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x12c6(_0x2c51fc,_0x239a41){const _0x2784eb=_0x2784();return _0x12c6=function(_0x12c6ce,_0x1a56de){_0x12c6ce=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.2

21 findings
HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1793a6=_0xb6ff;function _0x4bfc(){const _0x55b42b=['executeCommand','getSparkline','addSparkline',

HIGH obfuscation-while-true: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x1793a6=_0xb6ff;function _0x4bfc(){const _0x55b42b=['executeCommand','getSparkline','addSparkline',

HIGH obfuscation-hex-functions: lib/cjs/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x1793a6=_0xb6ff;function _0x4bfc(){const _0x55b42b=['executeCommand','getSparkline','addSparkline',

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x253285=_0x142e;(function(_0x186f42,_0x2841e7){const _0x23ea08=_0x142e,_0xb2ff7d=_0x186f42();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x253285=_0x142e;(function(_0x186f42,_0x2841e7){const _0x23ea08=_0x142e,_0xb2ff7d=_0x186f42();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x253285=_0x142e;(function(_0x186f42,_0x2841e7){const _0x23ea08=_0x142e,_0xb2ff7d=_0x186f42();while(

HIGH obfuscation-while-true: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x3d33e9=_0x3443;(function(_0x25c4b1,_0x46148d){const _0x6b5d90=_0x3443,_0xf23c52=_0x25c4b1();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3d33e9=_0x3443;(function(_0x25c4b1,_0x46148d){const _0x6b5d90=_0x3443,_0xf23c52=_0x25c4b1();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3d33e9=_0x3443;(function(_0x25c4b1,_0x46148d){const _0x6b5d90=_0x3443,_0xf23c52=_0x25c4b1();while(!![]){try{con

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x6aa7e3=_0x3e19;(function(_0x5bfa14,_0x1ce843){const _0x5abf11=_0x3e19,_0x335795=_0x5bfa14();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x6aa7e3=_0x3e19;(function(_0x5bfa14,_0x1ce843){const _0x5abf11=_0x3e19,_0x335795=_0x5bfa14();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x6aa7e3=_0x3e19;(function(_0x5bfa14,_0x1ce843){const _0x5abf11=_0x3e19,_0x335795=_0x5bfa14();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4d12(){const _0x2f7ceb=['length','amd','getSparklineByCell','composeSparkline','30yeYwvy','FWorksheet','real

HIGH obfuscation-hex-functions: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4d12(){const _0x2f7ceb=['length','amd','getSparklineByCell','composeSparkline','30yeYwvy','FWorksheet','real

HIGH obfuscation-while-true: lib/umd/facade.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x4d12(){const _0x2f7ceb=['length','amd','getSparklineByCell','composeSparkline','30yeYwvy','FWorksheet','real

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in facade.js is not expected for this package type; reject until resolved.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x501baa,_0x3b7964){const _0x431fe8=_0x10bd,_0x36080e=_0x501baa();while(!![]){try{const _0x2b3a31=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x501baa,_0x3b7964){const _0x431fe8=_0x10bd,_0x36080e=_0x501baa();while(!![]){try{const _0x2b3a31=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x501baa,_0x3b7964){const _0x431fe8=_0x10bd,_0x36080e=_0x501baa();while(!![]){try{const _0x2b3a31=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x501baa,_0x3b7964){const _0x431fe8=_0x10bd,_0x36080e=_0x501baa();while(!![]){try{const _0x2b3a31=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers in facade.js confirm javascript-obfuscator usage; reject until resolved.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x501baa,_0x3b7964){const _0x431fe8=_0x10bd,_0x36080e=_0x501baa();while(!![]){try{const _0x2b3a31=-parseInt(_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.