@vitejs/devtools
10
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
yyx990803vitebot
Keywords
vitevite-plugindevtoolsrpc
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | large-new-source-files | AI (source-diff): Build output restructured with new chunk hashes; normal for bundled devtools UI. | ai | |
| source-diff | obfuscated-file:dist/client/standalone/assets/ViewBuiltinLogs-6FhGMeG0.js | AI (source-diff): Bundled log viewer component; standard build output. | ai | |
| source-diff | obfuscated-file:dist/client/standalone/assets/ViewBuiltinTerminals-wseL3QSe.js | AI (source-diff): Bundled xterm terminal component; listed in inlinedDependencies. | ai | |
| source-diff | obfuscated-file:dist/client/standalone/assets/ViewJsonRender-BPuYvgyN.js | AI (source-diff): Bundled JSON renderer; inlined from @json-render packages. | ai | |
| source-diff | net-exec-file:dist/client/standalone/assets/ViewJsonRender-BPuYvgyN.js | AI (source-diff): JSON render component with fetch for devtools data; expected pattern. | ai | |
| source-diff | net-exec-file:dist/ViewJsonRender-Dzu3awS5.js | AI (source-diff): Same JSON render component, non-standalone bundle variant. | ai | |
| source-diff | obfuscated-file:dist/client/standalone/assets/dist-CKHeKHaB.js | AI (source-diff): Minified VueUse/Vue utility bundle; standard for this devtools package. | ai | |
| source-diff | obfuscated-file:dist/DockIcon-PimCgdE3.js | AI (source-diff): Bundled Vue component output, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/DockStandalone-B2BD_FTX.js | AI (source-diff): Bundled Vue component with inlined CSS; standard build output. | ai | |
| source-diff | obfuscated-file:dist/client/standalone/assets/DockStandalone-BGee0sFl.js | AI (source-diff): Minified standalone client bundle; expected for devtools UI. | ai | |
| source-diff | obfuscated-file:dist/client/standalone/assets/iconify-CklC9gnO.js | AI (source-diff): Bundled DOMPurify + iconify utilities; listed in inlinedDependencies. | ai | |
| source-diff | obfuscated-file:dist/client/standalone/assets/index-DUqjDCZm.js | AI (source-diff): Main standalone entry bundle; standard Vite build output. | ai | |
| source-diff | obfuscated-file:dist/client/standalone/assets/LogItem-GYCT6U_0.js | AI (source-diff): Bundled Vue DOM renderer + log components; standard build output. | ai | |
| dependencies | unvetted-dep:launch-editor | AI (dependencies): launch-editor is a well-known utility used by Vue CLI and similar tools to open files in editors; appropriate for a devtools package from the official Vite org. | ai | |
| dependencies | unvetted-dep:obug | AI (dependencies): obug is a debugging utility; its use is appropriate for a devtools package published by the official Vite/VoidZero organization with SLSA provenance. | ai | |
| phantom-deps | phantom-dep:ws | AI (phantom-deps): ws is a declared runtime dependency used in bundled output; phantom detection is a false positive for this package's build setup. | ai | |
| phantom-deps | phantom-dep:immer | AI (phantom-deps): immer is a declared runtime dependency; phantom detection is a false positive for this package's bundled build. | ai | |
| provenance | slsa-provenance | AI (provenance): Official Vite org package published via GitHub Actions with SLSA provenance; this is the expected and strongest supply chain signal for this package. | ai |