← Home

@univerjs-pro/thread-comment-datasource

[![npm version](https://img.shields.io/npm/v/@univerjs-pro/thread-comment-datasource)](https://npmjs.org/packages/@univerjs-pro/thread-comment-datasource) [![license](https://img.shields.io/npm/l/@univerjs-pro/thread-comment-datasource)](https://img.shiel

26
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

jikkaihexf00mengshukejiwendellhu95

Keywords

univeruniver-procommentthread-commentdatasource

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@univerjs-pro/facade AI (dependencies): First-party same-org dep pinned to matching version. ai
semgrep semgrep:dynamic-require AI (semgrep): Bundled module loading; benign build output for this monorepo package. ai
phantom-deps phantom-dep:@univerjs/protocol AI (phantom-deps): Referenced via config; stable false positive. ai
semgrep semgrep:obfuscation-while-true AI (semgrep): javascript-obfuscator output in published bundle; no malicious behavior, stable across Univer releases. ai
semgrep semgrep:obfuscation-hex-functions AI (semgrep): Hex identifiers from javascript-obfuscator build step; consistent bundle artifact for this package. ai

Versions (showing 26 of 26)

Version Deps Published
0.21.1 7 / 4
0.6.10 7 / 5
0.6.9 7 / 5
0.6.8 7 / 5
0.6.7 7 / 5
0.6.6 7 / 5
0.6.5 7 / 5
0.6.4 7 / 5
0.6.3 7 / 5
0.6.2 7 / 5
0.6.1 7 / 5
0.6.0 7 / 5
0.5.5 7 / 5
0.5.4 7 / 5
0.5.3 7 / 5
0.5.2 7 / 5
0.5.1 7 / 5
0.5.0 7 / 5
0.4.1 10 / 5
0.2.13 6 / 5
0.2.12 1 / 10
0.2.11 1 / 10
0.2.10 1 / 10
0.2.9 1 / 10
0.2.8 1 / 10
0.2.7 1 / 10

v0.6.10

15 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0xde316f=_0x5290;(function(_0xaf6147,_0x166a50){const _0x343a2d=_0x5290,_0x3b0139=_0xaf6147();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0xde316f=_0x5290;(function(_0xaf6147,_0x166a50){const _0x343a2d=_0x5290,_0x3b0139=_0xaf6147();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0xde316f=_0x5290;(function(_0xaf6147,_0x166a50){const _0x343a2d=_0x5290,_0x3b0139=_0xaf6147();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x2db34b=_0xa939;(function(_0x8f2a5,_0x11f41f){const _0x46c229=_0xa939,_0x26a478=_0x8f2a5();while(!![]){try{const

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2db34b=_0xa939;(function(_0x8f2a5,_0x11f41f){const _0x46c229=_0xa939,_0x26a478=_0x8f2a5();while(!![]){try{const

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2db34b=_0xa939;(function(_0x8f2a5,_0x11f41f){const _0x46c229=_0xa939,_0x26a478=_0x8f2a5();while(!![]){try{const

HIGH obfuscation-while-true: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x2db34b=_0xa939;(function(_0x8f2a5,_0x11f41f){const _0x46c229=_0xa939,_0x26a478=_0x8f2a5();while(!![]){try{const

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2db34b=_0xa939;(function(_0x8f2a5,_0x11f41f){const _0x46c229=_0xa939,_0x26a478=_0x8f2a5();while(!![]){try{const

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x2db34b=_0xa939;(function(_0x8f2a5,_0x11f41f){const _0x46c229=_0xa939,_0x26a478=_0x8f2a5();while(!![]){try{const

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3bdf(_0x594c15,_0x3e43ea){const _0x4a430a=_0x4a43();return _0x3bdf=function(_0x3bdf4c,_0x42a2db){_0x3bdf4c=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3bdf(_0x594c15,_0x3e43ea){const _0x4a430a=_0x4a43();return _0x3bdf=function(_0x3bdf4c,_0x42a2db){_0x3bdf4c=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x3bdf(_0x594c15,_0x3e43ea){const _0x4a430a=_0x4a43();return _0x3bdf=function(_0x3bdf4c,_0x42a2db){_0x3bdf4c=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3bdf(_0x594c15,_0x3e43ea){const _0x4a430a=_0x4a43();return _0x3bdf=function(_0x3bdf4c,_0x42a2db){_0x3bdf4c=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3bdf(_0x594c15,_0x3e43ea){const _0x4a430a=_0x4a43();return _0x3bdf=function(_0x3bdf4c,_0x42a2db){_0x3bdf4c=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.9

15 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x24ddea=_0x4779;(function(_0x27e2f2,_0x9e0fa3){const _0x320a03=_0x4779,_0x401b8b=_0x27e2f2();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x24ddea=_0x4779;(function(_0x27e2f2,_0x9e0fa3){const _0x320a03=_0x4779,_0x401b8b=_0x27e2f2();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x24ddea=_0x4779;(function(_0x27e2f2,_0x9e0fa3){const _0x320a03=_0x4779,_0x401b8b=_0x27e2f2();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x5af817=_0x52b1;(function(_0x18099e,_0x4eb9f0){const _0x4d06d5=_0x52b1,_0x2e5aed=_0x18099e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5af817=_0x52b1;(function(_0x18099e,_0x4eb9f0){const _0x4d06d5=_0x52b1,_0x2e5aed=_0x18099e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5af817=_0x52b1;(function(_0x18099e,_0x4eb9f0){const _0x4d06d5=_0x52b1,_0x2e5aed=_0x18099e();while(!![]){try{con

HIGH obfuscation-while-true: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x5af817=_0x52b1;(function(_0x18099e,_0x4eb9f0){const _0x4d06d5=_0x52b1,_0x2e5aed=_0x18099e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5af817=_0x52b1;(function(_0x18099e,_0x4eb9f0){const _0x4d06d5=_0x52b1,_0x2e5aed=_0x18099e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5af817=_0x52b1;(function(_0x18099e,_0x4eb9f0){const _0x4d06d5=_0x52b1,_0x2e5aed=_0x18099e();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3487(){const _0x3163c0=['Disposable','disposeWithMe','Inject','COMMENT','UniverInstanceType','userID','Unive

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3487(){const _0x3163c0=['Disposable','disposeWithMe','Inject','COMMENT','UniverInstanceType','userID','Unive

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x3487(){const _0x3163c0=['Disposable','disposeWithMe','Inject','COMMENT','UniverInstanceType','userID','Unive

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3487(){const _0x3163c0=['Disposable','disposeWithMe','Inject','COMMENT','UniverInstanceType','userID','Unive

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3487(){const _0x3163c0=['Disposable','disposeWithMe','Inject','COMMENT','UniverInstanceType','userID','Unive

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.8

15 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x5a3c69=_0x140b;(function(_0x9012e,_0x204477){const _0x36e73f=_0x140b,_0x507a66=_0x9012e();while(!!

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5a3c69=_0x140b;(function(_0x9012e,_0x204477){const _0x36e73f=_0x140b,_0x507a66=_0x9012e();while(!!

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5a3c69=_0x140b;(function(_0x9012e,_0x204477){const _0x36e73f=_0x140b,_0x507a66=_0x9012e();while(!!

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x5f5545=_0x1831;(function(_0x1eb6dc,_0x5de806){const _0x335203=_0x1831,_0x5086e1=_0x1eb6dc();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5f5545=_0x1831;(function(_0x1eb6dc,_0x5de806){const _0x335203=_0x1831,_0x5086e1=_0x1eb6dc();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5f5545=_0x1831;(function(_0x1eb6dc,_0x5de806){const _0x335203=_0x1831,_0x5086e1=_0x1eb6dc();while(!![]){try{con

HIGH obfuscation-while-true: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x5f5545=_0x1831;(function(_0x1eb6dc,_0x5de806){const _0x335203=_0x1831,_0x5086e1=_0x1eb6dc();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5f5545=_0x1831;(function(_0x1eb6dc,_0x5de806){const _0x335203=_0x1831,_0x5086e1=_0x1eb6dc();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x5f5545=_0x1831;(function(_0x1eb6dc,_0x5de806){const _0x335203=_0x1831,_0x5086e1=_0x1eb6dc();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1886(_0x5e0cba,_0x33f3d9){const _0x2ddd80=_0x2ddd();return _0x1886=function(_0x188607,_0x35377b){_0x188607=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1886(_0x5e0cba,_0x33f3d9){const _0x2ddd80=_0x2ddd();return _0x1886=function(_0x188607,_0x35377b){_0x188607=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x1886(_0x5e0cba,_0x33f3d9){const _0x2ddd80=_0x2ddd();return _0x1886=function(_0x188607,_0x35377b){_0x188607=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1886(_0x5e0cba,_0x33f3d9){const _0x2ddd80=_0x2ddd();return _0x1886=function(_0x188607,_0x35377b){_0x188607=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x1886(_0x5e0cba,_0x33f3d9){const _0x2ddd80=_0x2ddd();return _0x1886=function(_0x188607,_0x35377b){_0x188607=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.7

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x5c8879=_0x26b1;(function(_0x2ae74f,_0xf0dce){const _0x4a80bd=_0x26b1,_0x6e6e34=_0x2ae74f();while(!

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5c8879=_0x26b1;(function(_0x2ae74f,_0xf0dce){const _0x4a80bd=_0x26b1,_0x6e6e34=_0x2ae74f();while(!

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5c8879=_0x26b1;(function(_0x2ae74f,_0xf0dce){const _0x4a80bd=_0x26b1,_0x6e6e34=_0x2ae74f();while(!

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x211bde=_0x388b;(function(_0x2b393c,_0x589954){const _0x153e1a=_0x388b,_0x50d92c=_0x2b393c();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x211bde=_0x388b;(function(_0x2b393c,_0x589954){const _0x153e1a=_0x388b,_0x50d92c=_0x2b393c();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x211bde=_0x388b;(function(_0x2b393c,_0x589954){const _0x153e1a=_0x388b,_0x50d92c=_0x2b393c();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4a55(_0x3134ef,_0x1e74ce){const _0x32c137=_0x32c1();return _0x4a55=function(_0x4a551e,_0x15fbbd){_0x4a551e=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4a55(_0x3134ef,_0x1e74ce){const _0x32c137=_0x32c1();return _0x4a55=function(_0x4a551e,_0x15fbbd){_0x4a551e=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x4a55(_0x3134ef,_0x1e74ce){const _0x32c137=_0x32c1();return _0x4a55=function(_0x4a551e,_0x15fbbd){_0x4a551e=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4a55(_0x3134ef,_0x1e74ce){const _0x32c137=_0x32c1();return _0x4a55=function(_0x4a551e,_0x15fbbd){_0x4a551e=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4a55(_0x3134ef,_0x1e74ce){const _0x32c137=_0x32c1();return _0x4a55=function(_0x4a551e,_0x15fbbd){_0x4a551e=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.6

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x550f8f=_0x4086;(function(_0x83fabf,_0x45198d){const _0x5206db=_0x4086,_0x382a8d=_0x83fabf();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x550f8f=_0x4086;(function(_0x83fabf,_0x45198d){const _0x5206db=_0x4086,_0x382a8d=_0x83fabf();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x550f8f=_0x4086;(function(_0x83fabf,_0x45198d){const _0x5206db=_0x4086,_0x382a8d=_0x83fabf();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x452a10=_0x23a3;(function(_0x54c6af,_0x34802e){const _0x1f534f=_0x23a3,_0x46424d=_0x54c6af();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x452a10=_0x23a3;(function(_0x54c6af,_0x34802e){const _0x1f534f=_0x23a3,_0x46424d=_0x54c6af();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x452a10=_0x23a3;(function(_0x54c6af,_0x34802e){const _0x1f534f=_0x23a3,_0x46424d=_0x54c6af();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xf624(){const _0x49718c=['parse','_injector','_initUserSync','Unknown','user','stringify','get','UNRECOGNIZED

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xf624(){const _0x49718c=['parse','_injector','_initUserSync','Unknown','user','stringify','get','UNRECOGNIZED

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0xf624(){const _0x49718c=['parse','_injector','_initUserSync','Unknown','user','stringify','get','UNRECOGNIZED

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xf624(){const _0x49718c=['parse','_injector','_initUserSync','Unknown','user','stringify','get','UNRECOGNIZED

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0xf624(){const _0x49718c=['parse','_injector','_initUserSync','Unknown','user','stringify','get','UNRECOGNIZED

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.5

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x5530ba=_0x6530;(function(_0x41b944,_0x2d2df1){const _0x20bf8f=_0x6530,_0x4ce2d9=_0x41b944();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5530ba=_0x6530;(function(_0x41b944,_0x2d2df1){const _0x20bf8f=_0x6530,_0x4ce2d9=_0x41b944();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5530ba=_0x6530;(function(_0x41b944,_0x2d2df1){const _0x20bf8f=_0x6530,_0x4ce2d9=_0x41b944();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x30ca78=_0x994c;(function(_0x543fde,_0x395628){const _0x14a7fd=_0x994c,_0x4065f7=_0x543fde();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x30ca78=_0x994c;(function(_0x543fde,_0x395628){const _0x14a7fd=_0x994c,_0x4065f7=_0x543fde();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x30ca78=_0x994c;(function(_0x543fde,_0x395628){const _0x14a7fd=_0x994c,_0x4065f7=_0x543fde();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x35a160,_0x115755){const _0x3e32ee=_0x1c96,_0x44d53e=_0x35a160();while(!![]){try{const _0x39e18c=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x35a160,_0x115755){const _0x3e32ee=_0x1c96,_0x44d53e=_0x35a160();while(!![]){try{const _0x39e18c=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x35a160,_0x115755){const _0x3e32ee=_0x1c96,_0x44d53e=_0x35a160();while(!![]){try{const _0x39e18c=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x35a160,_0x115755){const _0x3e32ee=_0x1c96,_0x44d53e=_0x35a160();while(!![]){try{const _0x39e18c=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x35a160,_0x115755){const _0x3e32ee=_0x1c96,_0x44d53e=_0x35a160();while(!![]){try{const _0x39e18c=-parseInt(_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.4

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x5b4944=_0x515c;(function(_0x332033,_0x30fdad){const _0x147e5c=_0x515c,_0x43447c=_0x332033();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5b4944=_0x515c;(function(_0x332033,_0x30fdad){const _0x147e5c=_0x515c,_0x43447c=_0x332033();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5b4944=_0x515c;(function(_0x332033,_0x30fdad){const _0x147e5c=_0x515c,_0x43447c=_0x332033();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x450490=_0x28d3;(function(_0x391c96,_0x287992){const _0x4a5ecd=_0x28d3,_0x5b1d7e=_0x391c96();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x450490=_0x28d3;(function(_0x391c96,_0x287992){const _0x4a5ecd=_0x28d3,_0x5b1d7e=_0x391c96();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x450490=_0x28d3;(function(_0x391c96,_0x287992){const _0x4a5ecd=_0x28d3,_0x5b1d7e=_0x391c96();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x410f(_0x27a1fd,_0x2720aa){const _0x1c187d=_0x1c18();return _0x410f=function(_0x410f69,_0x4ec8c7){_0x410f69=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x410f(_0x27a1fd,_0x2720aa){const _0x1c187d=_0x1c18();return _0x410f=function(_0x410f69,_0x4ec8c7){_0x410f69=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x410f(_0x27a1fd,_0x2720aa){const _0x1c187d=_0x1c18();return _0x410f=function(_0x410f69,_0x4ec8c7){_0x410f69=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x410f(_0x27a1fd,_0x2720aa){const _0x1c187d=_0x1c18();return _0x410f=function(_0x410f69,_0x4ec8c7){_0x410f69=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x410f(_0x27a1fd,_0x2720aa){const _0x1c187d=_0x1c18();return _0x410f=function(_0x410f69,_0x4ec8c7){_0x410f69=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.3

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x5ec575=_0x3387;(function(_0x534494,_0x4706ae){const _0x42eecc=_0x3387,_0x14ab89=_0x534494();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5ec575=_0x3387;(function(_0x534494,_0x4706ae){const _0x42eecc=_0x3387,_0x14ab89=_0x534494();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5ec575=_0x3387;(function(_0x534494,_0x4706ae){const _0x42eecc=_0x3387,_0x14ab89=_0x534494();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x3f4afc=_0x2b04;(function(_0x4f6264,_0x411fbb){const _0x5e5296=_0x2b04,_0x58837c=_0x4f6264();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3f4afc=_0x2b04;(function(_0x4f6264,_0x411fbb){const _0x5e5296=_0x2b04,_0x58837c=_0x4f6264();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3f4afc=_0x2b04;(function(_0x4f6264,_0x411fbb){const _0x5e5296=_0x2b04,_0x58837c=_0x4f6264();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5343(){const _0x3b6b50=['format','144CZNrtp','addUser','rangeId','YYYY/MM/DD\x20HH:mm','Plugin','UniverThrea

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5343(){const _0x3b6b50=['format','144CZNrtp','addUser','rangeId','YYYY/MM/DD\x20HH:mm','Plugin','UniverThrea

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x5343(){const _0x3b6b50=['format','144CZNrtp','addUser','rangeId','YYYY/MM/DD\x20HH:mm','Plugin','UniverThrea

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5343(){const _0x3b6b50=['format','144CZNrtp','addUser','rangeId','YYYY/MM/DD\x20HH:mm','Plugin','UniverThrea

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5343(){const _0x3b6b50=['format','144CZNrtp','addUser','rangeId','YYYY/MM/DD\x20HH:mm','Plugin','UniverThrea

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.2

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x36155a=_0x5362;(function(_0x347c8f,_0x3f1e39){const _0xce9fd=_0x5362,_0x3518e1=_0x347c8f();while(!

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x36155a=_0x5362;(function(_0x347c8f,_0x3f1e39){const _0xce9fd=_0x5362,_0x3518e1=_0x347c8f();while(!

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x36155a=_0x5362;(function(_0x347c8f,_0x3f1e39){const _0xce9fd=_0x5362,_0x3518e1=_0x347c8f();while(!

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3767(){const _0x5233a8=['solved','addUser','getCurrentUser','rangeId','post','4154064AHckNC','thread-comment

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3767(){const _0x5233a8=['solved','addUser','getCurrentUser','rangeId','post','4154064AHckNC','thread-comment

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x3767(){const _0x5233a8=['solved','addUser','getCurrentUser','rangeId','post','4154064AHckNC','thread-comment

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x28d8(_0x2e18a7,_0x1c4bd5){const _0xe45183=_0xe451();return _0x28d8=function(_0x28d830,_0x1952ac){_0x28d830=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x28d8(_0x2e18a7,_0x1c4bd5){const _0xe45183=_0xe451();return _0x28d8=function(_0x28d830,_0x1952ac){_0x28d830=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x28d8(_0x2e18a7,_0x1c4bd5){const _0xe45183=_0xe451();return _0x28d8=function(_0x28d830,_0x1952ac){_0x28d830=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x28d8(_0x2e18a7,_0x1c4bd5){const _0xe45183=_0xe451();return _0x28d8=function(_0x28d830,_0x1952ac){_0x28d830=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x28d8(_0x2e18a7,_0x1c4bd5){const _0xe45183=_0xe451();return _0x28d8=function(_0x28d830,_0x1952ac){_0x28d830=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.1

12 findings
HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x153259=_0x573a;function _0x3da2(){const _0x44ccc2=['7EpsGwa','requireSession','_commentService','I

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x153259=_0x573a;function _0x3da2(){const _0x44ccc2=['7EpsGwa','requireSession','_commentService','I

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x153259=_0x573a;function _0x3da2(){const _0x44ccc2=['7EpsGwa','requireSession','_commentService','I

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x3f576e=_0x2bba;(function(_0x8fc6b8,_0x31236a){const _0x4e00a6=_0x2bba,_0x2260fc=_0x8fc6b8();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3f576e=_0x2bba;(function(_0x8fc6b8,_0x31236a){const _0x4e00a6=_0x2bba,_0x2260fc=_0x8fc6b8();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3f576e=_0x2bba;(function(_0x8fc6b8,_0x31236a){const _0x4e00a6=_0x2bba,_0x2260fc=_0x8fc6b8();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0xb520d2,_0xd688d9){const _0x24b211=_0x1f47,_0x291b0c=_0xb520d2();while(!![]){try{const _0x54edaa=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xb520d2,_0xd688d9){const _0x24b211=_0x1f47,_0x291b0c=_0xb520d2();while(!![]){try{const _0x54edaa=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xb520d2,_0xd688d9){const _0x24b211=_0x1f47,_0x291b0c=_0xb520d2();while(!![]){try{const _0x54edaa=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xb520d2,_0xd688d9){const _0x24b211=_0x1f47,_0x291b0c=_0xb520d2();while(!![]){try{const _0x54edaa=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0xb520d2,_0xd688d9){const _0x24b211=_0x1f47,_0x291b0c=_0xb520d2();while(!![]){try{const _0x54edaa=-parseInt(_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.0

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x199a68=_0x162f;(function(_0x4deadf,_0x411b60){const _0x56c706=_0x162f,_0x2c862b=_0x4deadf();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x199a68=_0x162f;(function(_0x4deadf,_0x411b60){const _0x56c706=_0x162f,_0x2c862b=_0x4deadf();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x199a68=_0x162f;(function(_0x4deadf,_0x411b60){const _0x56c706=_0x162f,_0x2c862b=_0x4deadf();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x4e06ef=_0x3080;(function(_0x38c186,_0x3d8d72){const _0x30d6f2=_0x3080,_0x187865=_0x38c186();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x4e06ef=_0x3080;(function(_0x38c186,_0x3d8d72){const _0x30d6f2=_0x3080,_0x187865=_0x38c186();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x4e06ef=_0x3080;(function(_0x38c186,_0x3d8d72){const _0x30d6f2=_0x3080,_0x187865=_0x38c186();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x27ff(_0x4dfe48,_0x31d53d){const _0x2e9f78=_0x2e9f();return _0x27ff=function(_0x27ff56,_0x58a3b4){_0x27ff56=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x27ff(_0x4dfe48,_0x31d53d){const _0x2e9f78=_0x2e9f();return _0x27ff=function(_0x27ff56,_0x58a3b4){_0x27ff56=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x27ff(_0x4dfe48,_0x31d53d){const _0x2e9f78=_0x2e9f();return _0x27ff=function(_0x27ff56,_0x58a3b4){_0x27ff56=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x27ff(_0x4dfe48,_0x31d53d){const _0x2e9f78=_0x2e9f();return _0x27ff=function(_0x27ff56,_0x58a3b4){_0x27ff56=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x27ff(_0x4dfe48,_0x31d53d){const _0x2e9f78=_0x2e9f();return _0x27ff=function(_0x27ff56,_0x58a3b4){_0x27ff56=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.5

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x23f222=_0x4cad;(function(_0x5d823e,_0x517ee6){const _0x56edcb=_0x4cad,_0x3fe19e=_0x5d823e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x23f222=_0x4cad;(function(_0x5d823e,_0x517ee6){const _0x56edcb=_0x4cad,_0x3fe19e=_0x5d823e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x23f222=_0x4cad;(function(_0x5d823e,_0x517ee6){const _0x56edcb=_0x4cad,_0x3fe19e=_0x5d823e();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x261e27=_0x5ae5;(function(_0x28069f,_0x170b09){const _0x43e99f=_0x5ae5,_0x43bd63=_0x28069f();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x261e27=_0x5ae5;(function(_0x28069f,_0x170b09){const _0x43e99f=_0x5ae5,_0x43bd63=_0x28069f();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x261e27=_0x5ae5;(function(_0x28069f,_0x170b09){const _0x43e99f=_0x5ae5,_0x43bd63=_0x28069f();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2b03(_0x16179e,_0x214350){const _0x2e316b=_0x2e31();return _0x2b03=function(_0x2b036d,_0x6af26c){_0x2b036d=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2b03(_0x16179e,_0x214350){const _0x2e316b=_0x2e31();return _0x2b03=function(_0x2b036d,_0x6af26c){_0x2b036d=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x2b03(_0x16179e,_0x214350){const _0x2e316b=_0x2e31();return _0x2b03=function(_0x2b036d,_0x6af26c){_0x2b036d=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2b03(_0x16179e,_0x214350){const _0x2e316b=_0x2e31();return _0x2b03=function(_0x2b036d,_0x6af26c){_0x2b036d=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2b03(_0x16179e,_0x214350){const _0x2e316b=_0x2e31();return _0x2b03=function(_0x2b036d,_0x6af26c){_0x2b036d=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.4

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x5c457a=_0x1f24;(function(_0x49be27,_0x43d615){const _0x5aecfa=_0x1f24,_0xc172df=_0x49be27();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5c457a=_0x1f24;(function(_0x49be27,_0x43d615){const _0x5aecfa=_0x1f24,_0xc172df=_0x49be27();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x5c457a=_0x1f24;(function(_0x49be27,_0x43d615){const _0x5aecfa=_0x1f24,_0xc172df=_0x49be27();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x9df1df=_0x106c;(function(_0x49d5d9,_0x2a02b0){const _0x307cd0=_0x106c,_0x44785a=_0x49d5d9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x9df1df=_0x106c;(function(_0x49d5d9,_0x2a02b0){const _0x307cd0=_0x106c,_0x44785a=_0x49d5d9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x9df1df=_0x106c;(function(_0x49d5d9,_0x2a02b0){const _0x307cd0=_0x106c,_0x44785a=_0x49d5d9();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x211a58,_0x2ff8ee){const _0x1cb941=_0x2d62,_0x159e18=_0x211a58();while(!![]){try{const _0x9de923=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x211a58,_0x2ff8ee){const _0x1cb941=_0x2d62,_0x159e18=_0x211a58();while(!![]){try{const _0x9de923=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x211a58,_0x2ff8ee){const _0x1cb941=_0x2d62,_0x159e18=_0x211a58();while(!![]){try{const _0x9de923=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x211a58,_0x2ff8ee){const _0x1cb941=_0x2d62,_0x159e18=_0x211a58();while(!![]){try{const _0x9de923=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x211a58,_0x2ff8ee){const _0x1cb941=_0x2d62,_0x159e18=_0x211a58();while(!![]){try{const _0x9de923=parseInt(_0

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.3

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x2556b8=_0xe5de;(function(_0x582d3c,_0x5158b5){const _0x4d432d=_0xe5de,_0x44690e=_0x582d3c();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x2556b8=_0xe5de;(function(_0x582d3c,_0x5158b5){const _0x4d432d=_0xe5de,_0x44690e=_0x582d3c();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x2556b8=_0xe5de;(function(_0x582d3c,_0x5158b5){const _0x4d432d=_0xe5de,_0x44690e=_0x582d3c();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x49a43c=_0x9690;(function(_0x2b01e8,_0x5843fb){const _0x676c49=_0x9690,_0x109221=_0x2b01e8();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x49a43c=_0x9690;(function(_0x2b01e8,_0x5843fb){const _0x676c49=_0x9690,_0x109221=_0x2b01e8();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x49a43c=_0x9690;(function(_0x2b01e8,_0x5843fb){const _0x676c49=_0x9690,_0x109221=_0x2b01e8();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x4cd3b6,_0x3f975b){const _0xa4281e=_0x213f,_0x20792d=_0x4cd3b6();while(!![]){try{const _0x4d072e=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4cd3b6,_0x3f975b){const _0xa4281e=_0x213f,_0x20792d=_0x4cd3b6();while(!![]){try{const _0x4d072e=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4cd3b6,_0x3f975b){const _0xa4281e=_0x213f,_0x20792d=_0x4cd3b6();while(!![]){try{const _0x4d072e=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4cd3b6,_0x3f975b){const _0xa4281e=_0x213f,_0x20792d=_0x4cd3b6();while(!![]){try{const _0x4d072e=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4cd3b6,_0x3f975b){const _0xa4281e=_0x213f,_0x20792d=_0x4cd3b6();while(!![]){try{const _0x4d072e=-parseInt(_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.2

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0xb43bae=_0x3412;(function(_0x37dcbc,_0x1881bf){const _0x5f535e=_0x3412,_0x868897=_0x37dcbc();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0xb43bae=_0x3412;(function(_0x37dcbc,_0x1881bf){const _0x5f535e=_0x3412,_0x868897=_0x37dcbc();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0xb43bae=_0x3412;(function(_0x37dcbc,_0x1881bf){const _0x5f535e=_0x3412,_0x868897=_0x37dcbc();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x3bdc18=_0xf802;(function(_0x3dcaee,_0x2d42f4){const _0x176979=_0xf802,_0x53263b=_0x3dcaee();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3bdc18=_0xf802;(function(_0x3dcaee,_0x2d42f4){const _0x176979=_0xf802,_0x53263b=_0x3dcaee();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3bdc18=_0xf802;(function(_0x3dcaee,_0x2d42f4){const _0x176979=_0xf802,_0x53263b=_0x3dcaee();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x5af292,_0x180766){const _0x2fef4b=_0x4459,_0x2439c2=_0x5af292();while(!![]){try{const _0x3ad8a7=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5af292,_0x180766){const _0x2fef4b=_0x4459,_0x2439c2=_0x5af292();while(!![]){try{const _0x3ad8a7=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5af292,_0x180766){const _0x2fef4b=_0x4459,_0x2439c2=_0x5af292();while(!![]){try{const _0x3ad8a7=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5af292,_0x180766){const _0x2fef4b=_0x4459,_0x2439c2=_0x5af292();while(!![]){try{const _0x3ad8a7=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x5af292,_0x180766){const _0x2fef4b=_0x4459,_0x2439c2=_0x5af292();while(!![]){try{const _0x3ad8a7=-parseInt(_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.1

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x176382=_0x31ee;(function(_0x28d792,_0x37076c){const _0x378d7f=_0x31ee,_0xbb233e=_0x28d792();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x176382=_0x31ee;(function(_0x28d792,_0x37076c){const _0x378d7f=_0x31ee,_0xbb233e=_0x28d792();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x176382=_0x31ee;(function(_0x28d792,_0x37076c){const _0x378d7f=_0x31ee,_0xbb233e=_0x28d792();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x3769f1=_0x4bc4;(function(_0x4192a2,_0x299c42){const _0x2910de=_0x4bc4,_0x432d69=_0x4192a2();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3769f1=_0x4bc4;(function(_0x4192a2,_0x299c42){const _0x2910de=_0x4bc4,_0x432d69=_0x4192a2();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x3769f1=_0x4bc4;(function(_0x4192a2,_0x299c42){const _0x2910de=_0x4bc4,_0x432d69=_0x4192a2();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4218(){const _0x27145b=['/universer-api/user/list','getComment','object','HTTPService','unitId','Solved','Ad

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4218(){const _0x27145b=['/universer-api/user/list','getComment','object','HTTPService','unitId','Solved','Ad

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x4218(){const _0x27145b=['/universer-api/user/list','getComment','object','HTTPService','unitId','Solved','Ad

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4218(){const _0x27145b=['/universer-api/user/list','getComment','object','HTTPService','unitId','Solved','Ad

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4218(){const _0x27145b=['/universer-api/user/list','getComment','object','HTTPService','unitId','Solved','Ad

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.0

12 findings
HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x1464(){const _0x2cb1c7=['getUnit','map','comments','reply','Reply','onStarting','4949988gCvTiW'

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';function _0x1464(){const _0x2cb1c7=['getUnit','map','comments','reply','Reply','onStarting','4949988gCvTiW'

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x1464(){const _0x2cb1c7=['getUnit','map','comments','reply','Reply','onStarting','4949988gCvTiW'

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x1773c6=_0x281f;(function(_0x58f8e9,_0x5680e4){const _0x406c10=_0x281f,_0x7fd4ca=_0x58f8e9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1773c6=_0x281f;(function(_0x58f8e9,_0x5680e4){const _0x406c10=_0x281f,_0x7fd4ca=_0x58f8e9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x1773c6=_0x281f;(function(_0x58f8e9,_0x5680e4){const _0x406c10=_0x281f,_0x7fd4ca=_0x58f8e9();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x7d39(){const _0x3de109=['error','876wUumos','add','/solved','_userService','post','_threadCommentDataSourceS

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x7d39(){const _0x3de109=['error','876wUumos','add','/solved','_userService','post','_threadCommentDataSourceS

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x7d39(){const _0x3de109=['error','876wUumos','add','/solved','_userService','post','_threadCommentDataSourceS

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x7d39(){const _0x3de109=['error','876wUumos','add','/solved','_userService','post','_threadCommentDataSourceS

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x7d39(){const _0x3de109=['error','876wUumos','add','/solved','_userService','post','_threadCommentDataSourceS

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.1

22 findings
HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x4786(_0x25e4db,_0x146133){var _0x58c789=_0x58c7();return _0x4786=function(_0x478686,_0x4a0a39){

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';function _0x4786(_0x25e4db,_0x146133){var _0x58c789=_0x58c7();return _0x4786=function(_0x478686,_0x4a0a39){

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x4786(_0x25e4db,_0x146133){var _0x58c789=_0x58c7();return _0x4786=function(_0x478686,_0x4a0a39){

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x4786(_0x25e4db,_0x146133){var _0x58c789=_0x58c7();return _0x4786=function(_0x478686,_0x4a0a39){

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x4786(_0x25e4db,_0x146133){var _0x58c789=_0x58c7();return _0x4786=function(_0x478686,_0x4a0a39){

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x4786(_0x25e4db,_0x146133){var _0x58c789=_0x58c7();return _0x4786=function(_0x478686,_0x4a0a39){

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0xb75de=_0x20d2;(function(_0x645e64,_0x523b62){var _0x583966=_0x20d2,_0x5ab3ad=_0x645e64();while(!![]){try{var _0x1

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xb75de=_0x20d2;(function(_0x645e64,_0x523b62){var _0x583966=_0x20d2,_0x5ab3ad=_0x645e64();while(!![]){try{var _0x1

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xb75de=_0x20d2;(function(_0x645e64,_0x523b62){var _0x583966=_0x20d2,_0x5ab3ad=_0x645e64();while(!![]){try{var _0x1

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xb75de=_0x20d2;(function(_0x645e64,_0x523b62){var _0x583966=_0x20d2,_0x5ab3ad=_0x645e64();while(!![]){try{var _0x1

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xb75de=_0x20d2;(function(_0x645e64,_0x523b62){var _0x583966=_0x20d2,_0x5ab3ad=_0x645e64();while(!![]){try{var _0x1

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xb75de=_0x20d2;(function(_0x645e64,_0x523b62){var _0x583966=_0x20d2,_0x5ab3ad=_0x645e64();while(!![]){try{var _0x1

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x191e(_0x5e4cd0,_0xa1634){var _0x31958c=_0x3195();return _0x191e=function(_0x191e70,_0x297072){_0x191e70=_0x1

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x191e(_0x5e4cd0,_0xa1634){var _0x31958c=_0x3195();return _0x191e=function(_0x191e70,_0x297072){_0x191e70=_0x1

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x191e(_0x5e4cd0,_0xa1634){var _0x31958c=_0x3195();return _0x191e=function(_0x191e70,_0x297072){_0x191e70=_0x1

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x191e(_0x5e4cd0,_0xa1634){var _0x31958c=_0x3195();return _0x191e=function(_0x191e70,_0x297072){_0x191e70=_0x1

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x191e(_0x5e4cd0,_0xa1634){var _0x31958c=_0x3195();return _0x191e=function(_0x191e70,_0x297072){_0x191e70=_0x1

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x191e(_0x5e4cd0,_0xa1634){var _0x31958c=_0x3195();return _0x191e=function(_0x191e70,_0x297072){_0x191e70=_0x1

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x191e(_0x5e4cd0,_0xa1634){var _0x31958c=_0x3195();return _0x191e=function(_0x191e70,_0x297072){_0x191e70=_0x1

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x191e(_0x5e4cd0,_0xa1634){var _0x31958c=_0x3195();return _0x191e=function(_0x191e70,_0x297072){_0x191e70=_0x1

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x191e(_0x5e4cd0,_0xa1634){var _0x31958c=_0x3195();return _0x191e=function(_0x191e70,_0x297072){_0x191e70=_0x1

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.13

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x24cf61=_0x2330;(function(_0x373bb6,_0x2214d3){const _0x51a8f3=_0x2330,_0x258ff2=_0x373bb6();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x24cf61=_0x2330;(function(_0x373bb6,_0x2214d3){const _0x51a8f3=_0x2330,_0x258ff2=_0x373bb6();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x24cf61=_0x2330;(function(_0x373bb6,_0x2214d3){const _0x51a8f3=_0x2330,_0x258ff2=_0x373bb6();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x52c2db=_0x47bd;(function(_0x2b79b,_0x4e69ff){const _0x3dc6f5=_0x47bd,_0x2608a5=_0x2b79b();while(!![]){try{const

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x52c2db=_0x47bd;(function(_0x2b79b,_0x4e69ff){const _0x3dc6f5=_0x47bd,_0x2608a5=_0x2b79b();while(!![]){try{const

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x52c2db=_0x47bd;(function(_0x2b79b,_0x4e69ff){const _0x3dc6f5=_0x47bd,_0x2608a5=_0x2b79b();while(!![]){try{const

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x50ad10,_0x5df032){const _0x11442e=_0x3e43,_0x91b148=_0x50ad10();while(!![]){try{const _0x13eb09=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x50ad10,_0x5df032){const _0x11442e=_0x3e43,_0x91b148=_0x50ad10();while(!![]){try{const _0x13eb09=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x50ad10,_0x5df032){const _0x11442e=_0x3e43,_0x91b148=_0x50ad10();while(!![]){try{const _0x13eb09=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x50ad10,_0x5df032){const _0x11442e=_0x3e43,_0x91b148=_0x50ad10();while(!![]){try{const _0x13eb09=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x50ad10,_0x5df032){const _0x11442e=_0x3e43,_0x91b148=_0x50ad10();while(!![]){try{const _0x13eb09=parseInt(_0

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.12

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x554ab8=_0x4252;(function(_0x325eba,_0x21a7e9){const _0xd8f1b6=_0x4252,_0x15abb0=_0x325eba();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x554ab8=_0x4252;(function(_0x325eba,_0x21a7e9){const _0xd8f1b6=_0x4252,_0x15abb0=_0x325eba();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x554ab8=_0x4252;(function(_0x325eba,_0x21a7e9){const _0xd8f1b6=_0x4252,_0x15abb0=_0x325eba();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x57daae=_0x5e66;(function(_0x4f5e39,_0x42dbb6){const _0x93238a=_0x5e66,_0x5db486=_0x4f5e39();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x57daae=_0x5e66;(function(_0x4f5e39,_0x42dbb6){const _0x93238a=_0x5e66,_0x5db486=_0x4f5e39();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x57daae=_0x5e66;(function(_0x4f5e39,_0x42dbb6){const _0x93238a=_0x5e66,_0x5db486=_0x4f5e39();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x18fec8,_0xf4c64e){const _0x1bbc00=_0xe498,_0xdb3ca7=_0x18fec8();while(!![]){try{const _0x10a951=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x18fec8,_0xf4c64e){const _0x1bbc00=_0xe498,_0xdb3ca7=_0x18fec8();while(!![]){try{const _0x10a951=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x18fec8,_0xf4c64e){const _0x1bbc00=_0xe498,_0xdb3ca7=_0x18fec8();while(!![]){try{const _0x10a951=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x18fec8,_0xf4c64e){const _0x1bbc00=_0xe498,_0xdb3ca7=_0x18fec8();while(!![]){try{const _0x10a951=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x18fec8,_0xf4c64e){const _0x1bbc00=_0xe498,_0xdb3ca7=_0x18fec8();while(!![]){try{const _0x10a951=-parseInt(_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.11

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x338967=_0x4edd;(function(_0x48e543,_0x1413fd){const _0x32dde1=_0x4edd,_0x578f8b=_0x48e543();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x338967=_0x4edd;(function(_0x48e543,_0x1413fd){const _0x32dde1=_0x4edd,_0x578f8b=_0x48e543();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x338967=_0x4edd;(function(_0x48e543,_0x1413fd){const _0x32dde1=_0x4edd,_0x578f8b=_0x48e543();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x143511=_0x322a;(function(_0x5efbee,_0xac3be2){const _0x1fa382=_0x322a,_0x34691d=_0x5efbee();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x143511=_0x322a;(function(_0x5efbee,_0xac3be2){const _0x1fa382=_0x322a,_0x34691d=_0x5efbee();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x143511=_0x322a;(function(_0x5efbee,_0xac3be2){const _0x1fa382=_0x322a,_0x34691d=_0x5efbee();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x207433,_0x362791){const _0x1d6924=_0x5d84,_0x24613b=_0x207433();while(!![]){try{const _0x400351=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x207433,_0x362791){const _0x1d6924=_0x5d84,_0x24613b=_0x207433();while(!![]){try{const _0x400351=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x207433,_0x362791){const _0x1d6924=_0x5d84,_0x24613b=_0x207433();while(!![]){try{const _0x400351=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x207433,_0x362791){const _0x1d6924=_0x5d84,_0x24613b=_0x207433();while(!![]){try{const _0x400351=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x207433,_0x362791){const _0x1d6924=_0x5d84,_0x24613b=_0x207433();while(!![]){try{const _0x400351=parseInt(_0

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.10

12 findings
HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x5904(){const _0x198e6c=['name','defineProperty','@univerjs/network','threadId','solved','search

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';function _0x5904(){const _0x198e6c=['name','defineProperty','@univerjs/network','threadId','solved','search

HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';function _0x5904(){const _0x198e6c=['name','defineProperty','@univerjs/network','threadId','solved','search

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x449fa0=_0x4c89;(function(_0x3fab0d,_0x3e432f){const _0x4b98ab=_0x4c89,_0x132643=_0x3fab0d();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x449fa0=_0x4c89;(function(_0x3fab0d,_0x3e432f){const _0x4b98ab=_0x4c89,_0x132643=_0x3fab0d();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x449fa0=_0x4c89;(function(_0x3fab0d,_0x3e432f){const _0x4b98ab=_0x4c89,_0x132643=_0x3fab0d();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x27ea(){const _0x3ee896=['getCurrentUser','CommentService','pluginName','16429bpzlhE','10kWHNsU','searchParam

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x27ea(){const _0x3ee896=['getCurrentUser','CommentService','pluginName','16429bpzlhE','10kWHNsU','searchParam

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x27ea(){const _0x3ee896=['getCurrentUser','CommentService','pluginName','16429bpzlhE','10kWHNsU','searchParam

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x27ea(){const _0x3ee896=['getCurrentUser','CommentService','pluginName','16429bpzlhE','10kWHNsU','searchParam

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x27ea(){const _0x3ee896=['getCurrentUser','CommentService','pluginName','16429bpzlhE','10kWHNsU','searchParam

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.9

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x49b930=_0x36ef;(function(_0x1dfc57,_0x14f415){const _0x2a2536=_0x36ef,_0x445e5f=_0x1dfc57();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x49b930=_0x36ef;(function(_0x1dfc57,_0x14f415){const _0x2a2536=_0x36ef,_0x445e5f=_0x1dfc57();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x49b930=_0x36ef;(function(_0x1dfc57,_0x14f415){const _0x2a2536=_0x36ef,_0x445e5f=_0x1dfc57();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x165011=_0x61ca;(function(_0x4c6505,_0x1f3fb4){const _0xe922fc=_0x61ca,_0x116961=_0x4c6505();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x165011=_0x61ca;(function(_0x4c6505,_0x1f3fb4){const _0xe922fc=_0x61ca,_0x116961=_0x4c6505();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x165011=_0x61ca;(function(_0x4c6505,_0x1f3fb4){const _0xe922fc=_0x61ca,_0x116961=_0x4c6505();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x790860,_0x3980dc){const _0xb16699=_0x4da0,_0x4b7b26=_0x790860();while(!![]){try{const _0x3cff4b=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x790860,_0x3980dc){const _0xb16699=_0x4da0,_0x4b7b26=_0x790860();while(!![]){try{const _0x3cff4b=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x790860,_0x3980dc){const _0xb16699=_0x4da0,_0x4b7b26=_0x790860();while(!![]){try{const _0x3cff4b=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x790860,_0x3980dc){const _0xb16699=_0x4da0,_0x4b7b26=_0x790860();while(!![]){try{const _0x3cff4b=-parseInt(_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x790860,_0x3980dc){const _0xb16699=_0x4da0,_0x4b7b26=_0x790860();while(!![]){try{const _0x3cff4b=-parseInt(_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.8

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x47d2ee=_0x5029;(function(_0x19962e,_0x13e61d){const _0x582e20=_0x5029,_0x373426=_0x19962e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x47d2ee=_0x5029;(function(_0x19962e,_0x13e61d){const _0x582e20=_0x5029,_0x373426=_0x19962e();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x47d2ee=_0x5029;(function(_0x19962e,_0x13e61d){const _0x582e20=_0x5029,_0x373426=_0x19962e();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x19aaa4=_0x4ae9;(function(_0x406814,_0x882e2d){const _0x31b825=_0x4ae9,_0x4d5a44=_0x406814();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x19aaa4=_0x4ae9;(function(_0x406814,_0x882e2d){const _0x31b825=_0x4ae9,_0x4d5a44=_0x406814();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x19aaa4=_0x4ae9;(function(_0x406814,_0x882e2d){const _0x31b825=_0x4ae9,_0x4d5a44=_0x406814();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x41ac(_0x397479,_0x14cb4f){const _0x2397cd=_0x2397();return _0x41ac=function(_0x41acf0,_0x188891){_0x41acf0=_

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x41ac(_0x397479,_0x14cb4f){const _0x2397cd=_0x2397();return _0x41ac=function(_0x41acf0,_0x188891){_0x41acf0=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x41ac(_0x397479,_0x14cb4f){const _0x2397cd=_0x2397();return _0x41ac=function(_0x41acf0,_0x188891){_0x41acf0=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x41ac(_0x397479,_0x14cb4f){const _0x2397cd=_0x2397();return _0x41ac=function(_0x41acf0,_0x188891){_0x41acf0=_

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x41ac(_0x397479,_0x14cb4f){const _0x2397cd=_0x2397();return _0x41ac=function(_0x41acf0,_0x188891){_0x41acf0=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.7

12 findings
HIGH obfuscation-while-true: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';const _0x417ebf=_0x104e;(function(_0x2ce857,_0xf88653){const _0x1a4e81=_0x104e,_0x2be0ae=_0x2ce857();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x417ebf=_0x104e;(function(_0x2ce857,_0xf88653){const _0x1a4e81=_0x104e,_0x2be0ae=_0x2ce857();while(

HIGH obfuscation-hex-functions: lib/cjs/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';const _0x417ebf=_0x104e;(function(_0x2ce857,_0xf88653){const _0x1a4e81=_0x104e,_0x2be0ae=_0x2ce857();while(

HIGH obfuscation-while-true: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | const _0x59033a=_0x5d6f;(function(_0x5259f0,_0xa9088e){const _0x369e12=_0x5d6f,_0x523d58=_0x5259f0();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x59033a=_0x5d6f;(function(_0x5259f0,_0xa9088e){const _0x369e12=_0x5d6f,_0x523d58=_0x5259f0();while(!![]){try{con

HIGH obfuscation-hex-functions: lib/es/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | const _0x59033a=_0x5d6f;(function(_0x5259f0,_0xa9088e){const _0x369e12=_0x5d6f,_0x523d58=_0x5259f0();while(!![]){try{con

HIGH obfuscation-while-true: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator signature; consistent with intentional obfuscation in the bundle.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x157b0e,_0x49e48c){const _0x528000=_0x17e0,_0x419aef=_0x157b0e();while(!![]){try{const _0x11f2c6=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x157b0e,_0x49e48c){const _0x528000=_0x17e0,_0x419aef=_0x157b0e();while(!![]){try{const _0x11f2c6=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x157b0e,_0x49e48c){const _0x528000=_0x17e0,_0x419aef=_0x157b0e();while(!![]){try{const _0x11f2c6=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x157b0e,_0x49e48c){const _0x528000=_0x17e0,_0x419aef=_0x157b0e();while(!![]){try{const _0x11f2c6=parseInt(_0

HIGH obfuscation-hex-functions: lib/umd/index.js:1 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Deliberate obfuscation in published CJS bundle; not expected for a datasource utility package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x157b0e,_0x49e48c){const _0x528000=_0x17e0,_0x419aef=_0x157b0e();while(!![]){try{const _0x11f2c6=parseInt(_0

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.