@veupathdb/clinepi-site
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/bundles/modern/975.bundle-2cee49161ed08a8ff740.js | AI (source-diff): Standard webpack minified bundle output for this package; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/975.bundle-116b78ea36bd5df4aa0c.js | AI (source-diff): Standard webpack minified bundle output for this package; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/951.bundle-a9196164ee66b5a95b76.js | AI (source-diff): Standard webpack minified bundle output for this package; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/951.bundle-176b6c9dc0c7c2c41944.js | AI (source-diff): Standard webpack minified bundle output for this package; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/733.bundle-d1fde431b961d7d316d0.js | AI (source-diff): Standard webpack minified bundle output for this package; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/733.bundle-3e963d34b22c6bb989f6.js | AI (source-diff): Standard webpack minified bundle output for this package; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/849.bundle-96a64606a4523494c877.js | AI (source-diff): Standard webpack minified bundle output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/733.bundle-379907a072d7655986fb.js | AI (source-diff): Standard webpack minified bundle output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/733.bundle-35b88696a050425a73ad.js | AI (source-diff): Standard webpack minified bundle output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/166.bundle-222e8e97bb8826bc4b8d.js | AI (source-diff): Standard webpack minified bundle output for VEuPathDB site; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/166.bundle-ff8ec369ec687565f238.js | AI (source-diff): Standard webpack minified bundle output; readable React code, no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/797.bundle-b533565caea4707ca2df.js | AI (source-diff): Standard webpack minified bundle output for VEuPathDB site. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/797.bundle-2d4227bb23f18ee6957f.js | AI (source-diff): Standard webpack minified bundle output for VEuPathDB site. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/733.bundle-ea778fe7c17d50e12c76.js | AI (source-diff): Standard webpack minified bundle output; readable React code, no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/733.bundle-6f2f41f9a7e5baabde17.js | AI (source-diff): Standard webpack minified bundle output; readable React code, no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/592.bundle-e196f07f307321677292.js | AI (source-diff): Standard webpack minified bundle output; readable React code, no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/592.bundle-8ee5d36981c603b90bb3.js | AI (source-diff): Standard webpack minified bundle output; readable React code, no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/444.bundle-aa7336c4c7a242a6375a.js | AI (source-diff): Standard webpack minified bundle output; readable React code, no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/444.bundle-72f5d2892df5b0e9a13f.js | AI (source-diff): Standard webpack minified bundle output; readable React code, no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/733.bundle-bd168a755d4d43120a61.js | AI (source-diff): Standard webpack minified bundle; readable React UI code in sample, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/797.bundle-8014ce4aacf09c1f019b.js | AI (source-diff): Standard webpack minified bundle; readable React UI code in sample, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/797.bundle-29d683ad93423731dc5d.js | AI (source-diff): Standard webpack minified bundle; readable React UI code in sample, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/733.bundle-a139a84abdf3f534c928.js | AI (source-diff): Standard webpack minified bundle; readable React UI code in sample, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/166.bundle-a8450b2a0dabea4ccadd.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/496.bundle-c8f34abb64741d491bbb.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/496.bundle-a428cdfe1084159b3a82.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/166.bundle-552bff53b18ce65b44ff.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; readable React code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/496.bundle-8e534b66df89d8d63d6b.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/951.bundle-d2bbe9a50894345ac3e1.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/951.bundle-2b6f2a492ee2e3786b36.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/797.bundle-d734b0d96ccd1e1f86dc.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/797.bundle-a77e60f8328e4e3bd8d2.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/496.bundle-6a7ed71305d6ec81703f.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/166.bundle-3e5a0294ac560031f530.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Established VEuPathDB org package; empty description is a known pattern across their packages, not a malware signal. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/592.bundle-c8c45906e164fa03ff45.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/592.bundle-352a569a2d38a946f374.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/496.bundle-d7e37d58211348ca884c.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/496.bundle-11f2940303150da9f377.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/166.bundle-1c1bf21f667562cf5799.js | AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/496.bundle-09e0997b399557c26cbd.js | AI (source-diff): Standard webpack production bundle; readable React code, consistent with this package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/496.bundle-a4b3b71992aa5821da5d.js | AI (source-diff): Standard webpack production bundle; readable React code, consistent with this package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/166.bundle-31fc83632db28de9c138.js | AI (source-diff): Standard webpack production bundle for this package; readable React code visible in samples. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/797.bundle-9c433ce562506ad98eeb.js | AI (source-diff): Standard webpack production bundle for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/797.bundle-27b9fe39fa7f03eb1355.js | AI (source-diff): Standard webpack production bundle for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/592.bundle-fb91717ec12d4efdbe50.js | AI (source-diff): Standard webpack production bundle for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/592.bundle-dffff091210a80232abc.js | AI (source-diff): Standard webpack production bundle for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/496.bundle-f375d0e1656ea4e80da8.js | AI (source-diff): Standard webpack production bundle for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/496.bundle-531dd6f5e2faaf79baff.js | AI (source-diff): Standard webpack production bundle for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/444.bundle-de27d6f41b1427ff0e9e.js | AI (source-diff): Standard webpack production bundle for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/444.bundle-3b7cf2c4ce9161610a3c.js | AI (source-diff): Standard webpack production bundle for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/166.bundle-89d6d35f97b72c2041d7.js | AI (source-diff): Standard webpack production bundle for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/166.bundle-adc56b9afb6063a8f6f2.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/797.bundle-8440da362beef78fba2d.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/797.bundle-5a373d1da0de90e0b197.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/592.bundle-ea31c8104dd88fb6cb47.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/592.bundle-76b773f2e0cf7c88920b.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/496.bundle-489f2450699bf75a4edf.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/496.bundle-1edcc3cd1665316eb96d.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/444.bundle-5f6285e95dcb86d128bb.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/444.bundle-39a5ccbf0392090df720.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/166.bundle-4e63e22cb1669ea7190c.js | AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/194.bundle-6fe94ca9fa86a9157c16.js | AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/592.bundle-4f517794dfe3d2069387.js | AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/592.bundle-3e51a6a6b66d0ef75b7c.js | AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/443.bundle-f36d91a0a97267a543ab.js | AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/443.bundle-b354729a761d8c41647b.js | AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/194.bundle-c22a2c194bca02012e2f.js | AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/166.bundle-f0a6aab6a35bd3dde9b0.js | AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/166.bundle-5f3e7f6ed3eebc374800.js | AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline across all versions. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/951.bundle-e23e3956fd08c257684f.js | AI (source-diff): Standard webpack production bundle from established VEuPathDB org package. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/797.bundle-db39a2ae0ce76887dd07.js | AI (source-diff): Standard webpack production bundle from established VEuPathDB org package. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/797.bundle-baf13f173aec3b4114fb.js | AI (source-diff): Standard webpack production bundle from established VEuPathDB org package. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/592.bundle-e3583c01d9268d540de5.js | AI (source-diff): Standard webpack production bundle; readable React code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/592.bundle-30ea67d2df522c9b77e3.js | AI (source-diff): Standard webpack production bundle; readable React code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/496.bundle-ffcc6275240968d0092f.js | AI (source-diff): Standard webpack production bundle; readable React code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/496.bundle-715262b553fff6fba104.js | AI (source-diff): Standard webpack production bundle; readable React code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/444.bundle-4f842285e027c5732a7f.js | AI (source-diff): Standard webpack production bundle; readable React code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/444.bundle-135064cf0b0d122903e8.js | AI (source-diff): Standard webpack production bundle; readable React code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/bundles/legacy/166.bundle-ada681b6696cbc3a9e44.js | AI (source-diff): Standard webpack production bundle; readable React code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/166.bundle-21c0ccec7c875fb1d95a.js | AI (source-diff): Standard webpack production bundle; readable React code visible in sample. Normal for this package. | ai | |
| source-diff | obfuscated-file:dist/bundles/modern/951.bundle-59a6a0be63158492dc69.js | AI (source-diff): Standard webpack production bundle from established VEuPathDB org package. | ai | |
| phantom-deps | phantom-dep:@veupathdb/preferred-organisms | AI (phantom-deps): workspace:^ sibling in the VEuPathDB monorepo; phantom-dep heuristic doesn't apply to monorepo workspace deps. | ai | |
| provenance | slsa-provenance | AI (provenance): SLSA provenance attestation present; stable CI/CD publishing pattern for this package. | ai |
Versions (showing 17 of 17)
| Version | Deps | Published |
|---|---|---|
| 1.4.14 | 0 / 59 | |
| 1.4.13 | 0 / 59 | |
| 1.4.12 | 0 / 59 | |
| 1.4.11 | 0 / 59 | |
| 1.4.10 | 0 / 59 | |
| 1.4.9 | 0 / 59 | |
| 1.4.8 | 0 / 59 | |
| 1.4.7 | 0 / 59 | |
| 1.4.6 | 0 / 59 | |
| 1.4.5 | 2 / 57 | |
| 1.4.4 | 1 / 57 | |
| 1.4.3 | 1 / 57 | |
| 1.4.2 | 1 / 57 | |
| 1.4.1 | 1 / 57 | |
| 1.3.49 | 1 / 57 | |
| 1.3.48 | 1 / 57 | |
| 1.3.46 | 0 / 57 |
v1.4.14
14 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.