← Home

@veupathdb/mbio-site

17
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

veupathdbbotbobulardmfalkeryanrdoherty

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-added AI (maintainer-change): Normal team maintainer addition for established monorepo package. ai
source-diff obfuscated-file:dist/bundles/modern/444.bundle-6cb0ce683313beab8689.js AI (source-diff): Webpack bundle output, not true obfuscation; consistent with this package's build process. ai
source-diff obfuscated-file:dist/bundles/legacy/508.bundle-9569d03b919150f6a7c4.js AI (source-diff): Standard webpack minified bundle output; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/508.bundle-f1ed3a5bdfec336e3d40.js AI (source-diff): Standard webpack minified bundle output; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/508.bundle-fc0a1f8eeb0e529f52c4.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/759.bundle-e16f4aae9ce55c081679.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/modern/759.bundle-b71e6463960b2040072a.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/508.bundle-caaee243e32871f9067d.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/508.bundle-ba220e2967ad523c05ff.js AI (source-diff): Standard webpack bundle output; readable React code, not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/508.bundle-70cf21c1964b53216267.js AI (source-diff): Standard webpack bundle output; readable React code, not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/38.bundle-387c5f4145f08e5dc581.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/918.bundle-e343b45f74099a467de4.js AI (source-diff): Standard webpack bundle output for this package. ai
source-diff obfuscated-file:dist/bundles/modern/918.bundle-83f13c5da80aa291e923.js AI (source-diff): Standard webpack bundle output for this package. ai
source-diff obfuscated-file:dist/bundles/legacy/759.bundle-e247fb44209c1c24adf0.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/modern/759.bundle-d67a2d66e70f6ff1cf9e.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/508.bundle-dff7cece589eb81f7930.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/modern/508.bundle-9e522d9f0dd879df3cf7.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/modern/38.bundle-0dcd6a2549c5106c8751.js AI (source-diff): Standard webpack bundle output; readable React code visible in sample, not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/728.bundle-70c6ed4905adb3083f52.js AI (source-diff): Standard webpack bundle output; not obfuscated. ai
source-diff obfuscated-file:dist/bundles/legacy/728.bundle-097c8c200f17152eb712.js AI (source-diff): Standard webpack bundle output; not obfuscated. ai
source-diff obfuscated-file:dist/bundles/modern/728.bundle-fee664d3cd2a544b705e.js AI (source-diff): Standard webpack bundle output. ai
source-diff obfuscated-file:dist/bundles/legacy/849.bundle-d9bf3aa58d507d5d7bd1.js AI (source-diff): Standard webpack bundle output. ai
source-diff obfuscated-file:dist/bundles/legacy/728.bundle-987d6e9d278ebfcb60db.js AI (source-diff): Standard webpack bundle output. ai
source-diff obfuscated-file:dist/bundles/legacy/38.bundle-ef84c1c4a294c4ce13c9.js AI (source-diff): Standard webpack bundle output; readable React code, not obfuscated. ai
source-diff obfuscated-file:dist/bundles/legacy/728.bundle-a1a45e6416c947eedf0a.js AI (source-diff): Standard webpack bundle output; readable React code, not obfuscated. ai
source-diff obfuscated-file:dist/bundles/modern/728.bundle-623f85b6bb7fecb7cb03.js AI (source-diff): Standard webpack bundle output; readable React code, not obfuscated. ai
source-diff obfuscated-file:dist/bundles/modern/38.bundle-a917d60c5ceb47eaaee8.js AI (source-diff): Standard webpack bundle output; readable React code, not obfuscated. ai
source-diff obfuscated-file:dist/bundles/modern/918.bundle-66ac386821fde38f0023.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/38.bundle-af8a169d78cf63a95ede.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/38.bundle-c51e69ed4825b23d0d36.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/508.bundle-370ac34cee55d9483b60.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/508.bundle-8ea5bb59884bf87f074c.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/607.bundle-3b5338d54d8e836abd00.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/607.bundle-bbb20d874fd3decdbf03.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/759.bundle-1eb48fc6fae68018e068.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/759.bundle-eafddef6b0a948bb0997.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/918.bundle-01949f545c9c65aaed4c.js AI (source-diff): Standard webpack bundle output for this package; not true obfuscation. ai
npm-metadata no-description AI (npm-metadata): Established monorepo package; empty description is a stable pattern across versions. ai
source-diff obfuscated-file:dist/bundles/legacy/38.bundle-1eac68533aac1870cb6c.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/918.bundle-f5beafce78be072af997.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/918.bundle-119200e09f64862805fe.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/759.bundle-b89e87d81aa77fe60044.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/38.bundle-927629b128d5b92d60ca.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/759.bundle-33acc9e886afab00291f.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/728.bundle-f46a0076a7f07d4f0627.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/728.bundle-8e039b4a52f0169116eb.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/607.bundle-ffaab7b549f5ce5fed71.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/607.bundle-5cbe42b4ed0f736c2efb.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/444.bundle-5acc24a090579e886203.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/444.bundle-03f0b08d6c1b2dddd217.js AI (source-diff): Standard webpack minified bundle output for this site package; not true obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/38.bundle-b63d57af2b9d9c3599ea.js AI (source-diff): Standard webpack production bundle; minification is expected build output. ai
source-diff obfuscated-file:dist/bundles/modern/508.bundle-b517c8e71c99824b046c.js AI (source-diff): Standard webpack production bundle; minification is expected build output. ai
source-diff obfuscated-file:dist/bundles/legacy/508.bundle-6ace983cfb584349b0fb.js AI (source-diff): Standard webpack production bundle; minification is expected build output. ai
source-diff obfuscated-file:dist/bundles/legacy/38.bundle-60b1c9ffed20c414c072.js AI (source-diff): Standard webpack production bundle for VEuPathDB React app; minification is expected build output. ai
source-diff obfuscated-file:dist/bundles/modern/759.bundle-c4c9e59e08ca6573c36e.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/modern/607.bundle-8c43c30ec8340a3ba6bd.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/607.bundle-727df7d7bc86c33523fc.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/508.bundle-801ff2acb9e0d1d84da8.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/modern/508.bundle-3fffe72853ca56870325.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/444.bundle-1d4b749f32edbd52ab9f.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/modern/444.bundle-0b847870341e5e951cb7.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/38.bundle-9ee2ca1227f4b29a7281.js AI (source-diff): Standard webpack production bundle; same pattern as all other dist/bundles/* files. ai
source-diff obfuscated-file:dist/bundles/modern/38.bundle-31094c814fda9e5a17bc.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo; minification is expected for all dist/bundles/* files. ai
source-diff obfuscated-file:dist/bundles/legacy/918.bundle-6f7fc6ad4d70eb7cb558.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/modern/918.bundle-2bedad379b73ae67d714.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/759.bundle-6704af041e50407c876e.js AI (source-diff): Standard webpack production bundle from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/296.bundle-6a8473a0515bba686164.js AI (source-diff): Standard webpack production bundle; same pattern as other bundles in this package. ai
source-diff obfuscated-file:dist/bundles/modern/759.bundle-77991787c4cc551ef01c.js AI (source-diff): Standard webpack production bundle; readable React component logic in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/759.bundle-aecd7d10583abb2994de.js AI (source-diff): Standard webpack production bundle; same pattern as other bundles in this package. ai
source-diff obfuscated-file:dist/bundles/legacy/884.bundle-6c763ed541cd7af7258c.js AI (source-diff): Standard webpack production bundle; readable React component logic in sample. ai
source-diff obfuscated-file:dist/bundles/modern/884.bundle-7b2389c1aafa98e6589b.js AI (source-diff): Standard webpack production bundle; same pattern as other bundles in this package. ai
source-diff obfuscated-file:dist/bundles/legacy/918.bundle-0b89e18fb7c60cba5375.js AI (source-diff): Standard webpack production bundle; readable React component logic in sample. ai
source-diff obfuscated-file:dist/bundles/modern/918.bundle-6a6b8f9e7b747c5ab1bf.js AI (source-diff): Standard webpack production bundle; same pattern as other bundles in this package. ai
source-diff obfuscated-file:dist/bundles/modern/296.bundle-1dbe3d2a618605cfcb5f.js AI (source-diff): Standard webpack production bundle; readable React code visible in sample. Consistent with this package's build pattern. ai
phantom-deps phantom-dep:@veupathdb/preferred-organisms AI (phantom-deps): Same-org workspace dep; phantom-dep heuristic unreliable for monorepo workspace packages. ai
publish-pattern dormant-publish AI (publish-pattern): Monorepo with SLSA provenance; dormancy reflects release cadence, not account takeover. ai

Versions (showing 17 of 17)

Version Deps Published
1.4.14 0 / 58
1.4.13 0 / 58
1.4.12 0 / 58
1.4.11 0 / 58
1.4.10 0 / 58
1.4.9 0 / 58
1.4.8 0 / 58
1.4.7 0 / 58
1.4.6 0 / 58
1.4.5 1 / 57
1.4.4 1 / 57
1.4.3 1 / 57
1.4.2 1 / 57
1.4.1 1 / 57
1.3.49 1 / 57
1.3.48 1 / 57
1.3.46 0 / 57

v1.4.14

14 findings
HIGH New obfuscated file: dist/bundles/modern/444.bundle-6cb0ce683313beab8689.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/444.bundle-8300c081bcb13e1df58f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/607.bundle-bb6563eb4db309276cb6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/607.bundle-f08f318f2e749b5b8764.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/728.bundle-0dfe4aa5d8600965cf89.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/728.bundle-29681f866988ba00a475.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/759.bundle-4e40d6055ce9bb1ff6d7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/759.bundle-f1132e3f465f68bcb4f3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/849.bundle-d9bf3aa58d507d5d7bd1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/918.bundle-db3ebff5ebc8a77224d7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/918.bundle-e1f128764452fded0eea.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/975.bundle-8502680f5a8c5fd5b944.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/975.bundle-a8863dbd752b4b154759.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.