@visulima/tsconfig
8
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
prisis
Keywords
anolilabget-tsconfigread-tsconfigts-configtsconfigtsconfig.jsonvisulima
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/packem_shared/implicitBaseUrlSymbol-CMaKZ6En.js | AI (source-diff): Minified build artifact from packem bundler; content is readable tsconfig-resolution logic with no malicious patterns. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Established visulima monorepo; dormancy reflects infrequent releases, not account takeover risk given SLSA provenance. | ai | |
| phantom-deps | phantom-dep:@visulima/path | AI (phantom-deps): Same-org dep declared in package.json; phantom-dep heuristic misfires for this monorepo package. | ai | |
| phantom-deps | phantom-dep:jsonc-parser | AI (phantom-deps): Declared in dependencies; used transitively or via config — stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:resolve-pkg-maps | AI (phantom-deps): Declared in dependencies; stable false positive for this package. | ai |