@vizejs/rspack-plugin
High-performance Rspack plugin for Vue SFC compilation powered by Vize
13
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
ubugeeei
Keywords
compilerfastloadernativepluginrspacksfcvue
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/loader-hFzurQxg.mjs | AI (source-diff): Minified bundler output for the SFC loader, not obfuscation; content matches stated plugin functionality. | ai | |
| source-diff | obfuscated-file:dist/loader-Lgg-oaBX.mjs | AI (source-diff): Bundled/minified tsdown output, not obfuscation; matches stated loader functionality. | ai | |
| phantom-deps | phantom-dep:oxc-parser | AI (phantom-deps): Used via config/build tooling, not direct import; low risk. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): oxc-parser is a well-known parser dep, fits plugin's SFC compilation purpose. | ai | |
| source-diff | obfuscated-file:dist/loader-zhnTzdd6.mjs | AI (source-diff): Minified build artifact containing readable Vue SFC loader logic; standard bundler output for this package. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): Automated CI/CD releases with SLSA provenance; rapid publish cadence is expected for this package. | ai | |
| source-diff | obfuscated-file:dist/loader-BslWL-th.mjs | AI (source-diff): Minified bundler output with readable Vue HMR logic; not obfuscation. Stable pattern for this build-tool package. | ai | |
| source-diff | obfuscated-file:dist/loader-Cu6KT7rY.mjs | AI (source-diff): Content-hash named rollup/tsdown chunk; sample shows plain Vue SFC loader logic, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/utils-BW6CWIY4.mjs | AI (source-diff): Standard bundler-minified output (tsdown); content is readable Vue SFC/CSS utility logic, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/utils-B5WyWrfH.mjs | AI (source-diff): Standard minified build output from vp pack; content is Vue SFC utility code with no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/utils-DDd2p4Wp.mjs | AI (source-diff): Standard bundler minification output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index.mjs | AI (source-diff): Standard bundler minification output; readable logic, no malicious patterns. | ai | |
| phantom-deps | phantom-dep:@vizejs/native | AI (phantom-deps): Same-org native binding declared as runtime dep; dynamic loading pattern is expected for native modules. | ai |