@valtimo/components
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:esm2022/lib/components/list/list.component.mjs | AI (source-diff): Same ngc build-output pattern, no malicious code. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/menu/menu.service.mjs | AI (source-diff): Same ngc build-output pattern, no malicious code. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/value-path-selector/value-path-selector.component.mjs | AI (source-diff): Same ngc build-output pattern, no malicious code. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/right-sidebar/right-sidebar.component.mjs | AI (source-diff): Same ngc build-output pattern, no malicious code. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/search-fields/search-fields.component.mjs | AI (source-diff): Angular ngc-compiled ESM output, not obfuscation; standard imports/license header visible. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): ngx-toastr is a well-known, established toast library. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/camunda/form/generated/formfield/choicefield/camunda-choicefield-formfield.component.mjs | AI (source-diff): Angular AOT-generated source with inlined template, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/camunda/form/custom/camunda-custom-form.component.mjs | AI (source-diff): Angular AOT-generated source with inlined template, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/camunda/form/generated/formfield/boolean/camunda-boolean-formfield.component.mjs | AI (source-diff): Angular AOT-generated source with inlined template, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/carbon-list/carbon-list.module.mjs | AI (source-diff): Angular Ivy compiled output; long lines are inline template metadata/sourcemaps, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/multi-input/carbon-multi-input.component.mjs | AI (source-diff): Angular Ivy compiled output; long lines are inline template metadata/sourcemaps, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/carbon-list/carbon-list.component.mjs | AI (source-diff): Angular Ivy compiled output; long lines are inline template metadata/sourcemaps, not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/breadcrumb-navigation/breadcrumb-navigation.component.mjs | AI (source-diff): Angular ng-packagr ESM2022 build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/alert/alert.component.mjs | AI (source-diff): Angular ng-packagr ESM2022 build output with inline sourcemaps; not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/alert/alert.service.mjs | AI (source-diff): Angular ng-packagr ESM2022 build output; long lines are Angular compiler metadata + inline sourcemaps. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/multi-input/components/arbitrary-amount-value/arbitrary-amount-value.component.mjs | AI (source-diff): Angular ng-packagr ESM2022 build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/view-content/type-converters/booleanTypeConverter.mjs | AI (source-diff): Angular ng-packagr ESM2022 build output with base64 sourcemap; not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/bpmn-js-diagram/bpmn-js-diagram.component.mjs | AI (source-diff): Angular ng-packagr ESM2022 build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/breadcrumb-navigation/breadcrumb.service.mjs | AI (source-diff): Angular ng-packagr ESM2022 build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:esm2022/lib/components/button/button.component.mjs | AI (source-diff): Angular ng-packagr ESM2022 build output; not obfuscation. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large Angular library; 341 new files reflect new components added in this release, not injected code. | ai | |
| phantom-deps | phantom-dep:ngx-toastr | AI (phantom-deps): ngx-toastr is a peer/config-level dep for Angular apps; not directly imported in library code is expected. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Consistent across all versions of this package; not a malice indicator. | ai | |
| dependencies | unvetted-dep:@foxythemes/bootstrap-datetime-picker-bs4 | AI (dependencies): Bootstrap datetime picker; expected UI dep for this library. | ai | |
| dependencies | unvetted-dep:ng-multiselect-dropdown | AI (dependencies): Popular Angular multiselect component; stable UI dep. | ai | |
| dependencies | unvetted-dep:@carbon/charts-angular | AI (dependencies): IBM Carbon charting library; legitimate UI dep. | ai | |
| dependencies | unvetted-dep:muuri | AI (dependencies): Legitimate drag-and-drop grid library; stable dep for this UI package. | ai | |
| dependencies | unvetted-dep:@tadashi/currency | AI (dependencies): Currency formatting utility; low-risk UI dep. | ai | |
| dependencies | unvetted-dep:heatmap.js-fixed | AI (dependencies): Known heatmap visualization library; stable UI dep. | ai | |
| dependencies | unvetted-dep:@formio/angular | AI (dependencies): Official formio Angular wrapper; expected for this UI library. | ai | |
| dependencies | unvetted-dep:formiojs | AI (dependencies): Standard form.io runtime; expected dep for Angular form components. | ai | |
| phantom-deps | phantom-dep:@carbon/grid | AI (phantom-deps): Carbon CSS framework loaded via styles config; stable false positive. | ai | |
| phantom-deps | phantom-dep:@mdi/font | AI (phantom-deps): Icon font loaded via config/styles; not directly imported by convention. | ai | |
| phantom-deps | phantom-dep:semver | AI (phantom-deps): Config-referenced utility; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@carbon/styles | AI (phantom-deps): Carbon CSS loaded via styles config; stable false positive. | ai | |
| phantom-deps | phantom-dep:@carbon/themes | AI (phantom-deps): Carbon theming loaded via config; stable false positive. | ai | |
| phantom-deps | phantom-dep:@types/topojson | AI (phantom-deps): Type-only dep for charts; framework-scoped, stable false positive. | ai | |
| phantom-deps | phantom-dep:@carbon/charts-angular | AI (phantom-deps): Loaded via Angular module convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@ngx-translate/http-loader | AI (phantom-deps): i18n loader referenced in config; stable false positive for Angular libs. | ai | |
| phantom-deps | phantom-dep:@foxythemes/bootstrap-datetime-picker-bs4 | AI (phantom-deps): Config-referenced; stable false positive for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established library with 169 versions; missing metadata is cosmetic, not indicative of malice. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): Known Angular/TypeScript implicit runtime dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:jquery | AI (phantom-deps): Referenced in config files for datetime picker; not a direct import by design. | ai |
Versions (showing 51 of 66)
| Version | Deps | Published |
|---|---|---|
| 13.37.0 | 35 / 0 | |
| 13.36.1 | 35 / 0 | |
| 13.36.0 | 35 / 0 | |
| 13.35.0 | 35 / 0 | |
| 13.34.0 | 35 / 0 | |
| 13.33.0 | 35 / 0 | |
| 13.32.0 | 35 / 0 | |
| 13.31.0 | 35 / 0 | |
| 13.30.0 | 35 / 0 | |
| 13.29.0 | 35 / 0 | |
| 13.28.1 | 35 / 0 | |
| 13.28.0 | 35 / 0 | |
| 13.27.0 | 34 / 0 | |
| 13.26.0 | 34 / 0 | |
| 13.25.1 | 34 / 0 | |
| 13.25.0 | 34 / 0 | |
| 13.24.1 | 34 / 0 | |
| 13.24.0 | 34 / 0 | |
| 13.23.0 | 34 / 0 | |
| 13.22.0 | 33 / 0 | |
| 13.21.0 | 33 / 0 | |
| 13.20.0 | 33 / 0 | |
| 13.19.0 | 33 / 0 | |
| 13.18.0 | 33 / 0 | |
| 13.17.1 | 33 / 0 | |
| 13.17.0 | 33 / 0 | |
| 13.16.0 | 33 / 0 | |
| 13.15.0 | 33 / 0 | |
| 13.14.0 | 33 / 0 | |
| 13.13.0 | 33 / 0 | |
| 13.12.0 | 31 / 0 | |
| 13.11.0 | 31 / 0 | |
| 13.10.0 | 31 / 0 | |
| 13.9.1 | 31 / 0 | |
| 13.9.0 | 31 / 0 | |
| 13.8.0 | 31 / 0 | |
| 13.7.0 | 31 / 0 | |
| 13.6.0 | 31 / 0 | |
| 13.5.1 | 31 / 0 | |
| 13.5.0 | 31 / 0 | |
| 12.40.0 | 30 / 0 | |
| 12.39.0 | 30 / 0 | |
| 12.38.0 | 30 / 0 | |
| 12.37.0 | 30 / 0 | |
| 12.36.0 | 30 / 0 | |
| 12.35.0 | 30 / 0 | |
| 12.34.0 | 30 / 0 | |
| 12.33.1 | 30 / 0 | |
| 12.33.0 | 30 / 0 | |
| 12.32.0 | 30 / 0 | |
| 12.31.0 | 30 / 0 |
v13.37.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.36.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.36.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v13.35.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.40.0
45 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v12.39.0
23 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.