@weapp-vite/dashboard
Optional analyze dashboard for weapp-vite
85
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
No source commit
Maintainers
icebreaker
Keywords
weapp-viteanalyzedashboard
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publishing is confirmed by SLSA provenance attestation; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/assets/activity.js | AI (source-diff): Vite-bundled ES module output; long lines are minified Vue component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/assets/tokens.js | AI (source-diff): Vite-bundled ES module output; long lines are minified Vue component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/assets/AppStatCard.js | AI (source-diff): Vite-bundled ES module output; long lines are minified Vue component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/assets/analyze.js | AI (source-diff): Vite-bundled ES module output; long lines are minified Vue component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/assets/ts.worker-B0J26iPs.js | AI (source-diff): Monaco Editor TypeScript worker bundle — expected large minified artifact for this dashboard package. | ai | |
| source-diff | net-exec-file:dist/assets/ts.worker-B0J26iPs.js | AI (source-diff): Monaco TS worker legitimately uses network (LSP) and eval-like patterns; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/assets/shell.js | AI (source-diff): Minified dashboard shell bundle (Vue components); expected build output for this dashboard package. | ai | |
| source-diff | net-exec-file:dist/assets/ts.worker-Dth06zuC.js | AI (source-diff): Monaco TS worker legitimately uses network (fetch for type definitions) and dynamic execution; standard behavior for this library. | ai | |
| source-diff | obfuscated-file:dist/assets/ts.worker-Dth06zuC.js | AI (source-diff): Standard minified Monaco Editor TypeScript worker bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/assets/editor.worker-Bd9IXS8d.js | AI (source-diff): Minified Monaco Editor editor worker bundle; expected artifact of monaco-editor dependency. | ai | |
| source-diff | obfuscated-file:dist/assets/css.worker-Wv5dxAWO.js | AI (source-diff): Minified Monaco Editor CSS worker bundle; expected artifact of monaco-editor dependency. | ai | |
| source-diff | obfuscated-file:dist/assets/html.worker-CQP8QQsS.js | AI (source-diff): Minified Monaco Editor HTML worker bundle; expected artifact of monaco-editor dependency. | ai | |
| source-diff | obfuscated-file:dist/assets/json.worker-DzV-CpCQ.js | AI (source-diff): Minified Monaco Editor JSON worker bundle; expected artifact of monaco-editor dependency. | ai | |
| source-diff | obfuscated-file:dist/assets/ts.worker-METxwbDZ.js | AI (source-diff): Minified Monaco Editor TypeScript worker bundle; expected artifact of monaco-editor dependency. | ai | |
| source-diff | net-exec-file:dist/assets/ts.worker-METxwbDZ.js | AI (source-diff): Monaco TS worker uses dynamic code execution for TypeScript language service; standard Monaco behavior, not malware. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase fully explained by bundling monaco-editor (~13MB) into the dashboard dist. | ai | |
| source-diff | obfuscated-file:dist/assets/vendor.js | AI (source-diff): Vite-bundled minified output of UI libraries; not malicious obfuscation. Stable pattern for this dashboard package. | ai | |
| source-diff | obfuscated-file:dist/assets/css.worker-CvXBzhp8.js | AI (source-diff): Standard minified Monaco Editor CSS worker; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/assets/monaco.js | AI (source-diff): Standard minified Monaco Editor bundle; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/assets/json.worker-BkJRGcCJ.js | AI (source-diff): Standard minified Monaco Editor JSON worker; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/assets/html.worker-BO6WuOEO.js | AI (source-diff): Standard minified Monaco Editor HTML worker; not obfuscated malware. | ai | |
| source-diff | net-exec-file:dist/assets/ts.worker-B6r0Skfj.js | AI (source-diff): Monaco TS worker legitimately uses network (fetch for type definitions) and dynamic code execution; standard editor behavior. | ai | |
| phantom-deps | phantom-dep:monaco-editor | AI (phantom-deps): monaco-editor is bundled into dist assets; not directly imported in source but legitimately declared as a dependency. | ai | |
| source-diff | obfuscated-file:dist/assets/editor.worker-Cn2oRESe.js | AI (source-diff): Standard minified Monaco Editor worker; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/assets/ts.worker-B6r0Skfj.js | AI (source-diff): Standard minified Monaco Editor TypeScript worker; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/assets/useDashboardWorkspace.js | AI (source-diff): Standard Vite minified bundle output for a Vue dashboard; readable logic, no obfuscation indicators. | ai | |
| phantom-deps | phantom-dep:tailwind-merge | AI (phantom-deps): Runtime dependency; referenced in config and build context, not direct imports. | ai | |
| phantom-deps | phantom-dep:vue-router | AI (phantom-deps): Runtime dependency; referenced in config and build context, not direct imports. | ai | |
| phantom-deps | phantom-dep:echarts | AI (phantom-deps): Runtime dependency; referenced in config and build context, not direct imports. | ai | |
| phantom-deps | phantom-dep:tailwind-variants | AI (phantom-deps): Runtime dependency; referenced in config and build context, not direct imports. | ai | |
| phantom-deps | phantom-dep:vue | AI (phantom-deps): Runtime dependency; referenced in config and build context, not direct imports. | ai |
Versions (showing 85 of 85)
| Version | Deps | Published |
|---|---|---|
| 6.17.2 | 6 / 8 | |
| 6.17.1 | 6 / 8 | |
| 6.16.43 | 6 / 8 | |
| 6.16.42 | 6 / 8 | |
| 6.16.41 | 6 / 8 | |
| 6.16.40 | 6 / 8 | |
| 6.16.37 | 6 / 8 | |
| 6.16.35 | 6 / 8 | |
| 6.16.34 | 6 / 8 | |
| 6.16.33 | 6 / 8 | |
| 6.16.32 | 6 / 8 | |
| 6.16.31 | 6 / 8 | |
| 6.16.30 | 6 / 8 | |
| 6.16.29 | 6 / 8 | |
| 6.16.28 | 6 / 8 | |
| 6.16.27 | 6 / 8 | |
| 6.16.26 | 6 / 8 | |
| 6.16.25 | 6 / 8 | |
| 6.16.24 | 6 / 8 | |
| 6.16.23 | 6 / 8 | |
| 6.16.22 | 6 / 8 | |
| 6.16.21 | 6 / 8 | |
| 6.16.20 | 6 / 8 | |
| 6.16.19 | 6 / 8 | |
| 6.16.18 | 6 / 8 | |
| 6.16.17 | 6 / 8 | |
| 6.16.16 | 6 / 8 | |
| 6.16.15 | 6 / 8 | |
| 6.16.14 | 6 / 8 | |
| 6.16.13 | 6 / 8 | |
| 6.16.12 | 6 / 8 | |
| 6.16.11 | 6 / 8 | |
| 6.16.10 | 6 / 8 | |
| 6.16.9 | 6 / 8 | |
| 6.16.8 | 6 / 8 | |
| 6.16.7 | 6 / 8 | |
| 6.16.6 | 6 / 8 | |
| 6.16.5 | 6 / 8 | |
| 6.16.4 | 6 / 8 | |
| 6.16.3 | 6 / 8 | |
| 6.16.2 | 6 / 8 | |
| 6.16.1 | 5 / 7 | |
| 6.16.0 | 5 / 7 | |
| 6.15.18 | 5 / 7 | |
| 6.15.17 | 5 / 7 | |
| 6.15.16 | 5 / 7 | |
| 6.15.15 | 5 / 7 | |
| 6.15.14 | 5 / 7 | |
| 6.15.13 | 5 / 7 | |
| 6.15.12 | 5 / 7 | |
| 6.15.11 | 5 / 7 | |
| 6.15.10 | 5 / 7 | |
| 6.15.8 | 5 / 7 | |
| 6.15.7 | 5 / 7 | |
| 6.15.6 | 5 / 7 | |
| 6.15.5 | 5 / 7 | |
| 6.15.4 | 5 / 7 | |
| 6.15.3 | 5 / 7 | |
| 6.15.1 | 5 / 7 | |
| 6.15.0 | 5 / 7 | |
| 6.14.3 | 5 / 7 | |
| 6.14.2 | 5 / 7 | |
| 6.14.1 | 5 / 7 | |
| 6.14.0 | 5 / 7 | |
| 6.13.4 | 5 / 7 | |
| 6.13.3 | 5 / 7 | |
| 6.13.2 | 5 / 7 | |
| 6.13.1 | 5 / 7 | |
| 6.13.0 | 5 / 7 | |
| 6.12.4 | 5 / 7 | |
| 6.12.3 | 5 / 7 | |
| 6.12.1 | 5 / 7 | |
| 6.12.0 | 5 / 7 | |
| 6.11.9 | 5 / 7 | |
| 6.11.8 | 5 / 7 | |
| 6.11.7 | 5 / 7 | |
| 6.11.6 | 5 / 7 | |
| 6.11.5 | 3 / 5 | |
| 6.11.4 | 3 / 5 | |
| 6.11.3 | 3 / 5 | |
| 6.11.1 | 3 / 5 | |
| 6.10.2 | 3 / 5 | |
| 6.10.1 | 3 / 5 | |
| 6.10.0 | 3 / 5 | |
| 6.9.1 | 3 / 5 |