← Home

@weapp-vite/web

npm Repository
47
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

icebreaker

Keywords

weappwebviteruntime

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff net-exec-file:dist/runtime-CzDRu7R1.mjs AI (source-diff): Rolldown-bundled LitElement runtime; network calls are WeChat miniprogram API wrappers, not dropper behavior. ai
source-diff obfuscated-file:dist/index-w9xxIH-l.d.mts AI (source-diff): Long lines are bundled TypeScript re-export declarations, not obfuscation; stable pattern for this build tool. ai
source-diff obfuscated-file:dist/runtime/index.d.mts AI (source-diff): Same bundled .d.mts re-export pattern; false positive for this package. ai
source-diff net-exec-file:dist/runtime-xs_hRUwz.mjs AI (source-diff): Readable Rolldown bundle of LitElement/htmlparser2 runtime; no actual fetch+eval dropper pattern present. ai
source-diff obfuscated-file:dist/index.d.mts AI (source-diff): Long lines are bundled TypeScript type declarations, not obfuscated executable code. Stable pattern for this build toolchain. ai
source-diff obfuscated-file:dist/plugin.d.mts AI (source-diff): Long lines are bundled TypeScript type declarations from vite/node_modules paths, not obfuscated executable code. ai
source-diff net-exec-file:dist/runtime-D6j2_x_N.mjs AI (source-diff): Bundled Lit/Web Components runtime; no actual network fetch or dynamic code execution — false positive from heuristic rule. ai

Versions (showing 47 of 47)

Version Deps Published
1.3.37 12 / 0
1.3.36 12 / 0
1.3.35 12 / 0
1.3.34 12 / 0
1.3.33 12 / 0
1.3.32 12 / 0
1.3.31 12 / 0
1.3.30 12 / 0
1.3.29 11 / 0
1.3.28 11 / 0
1.3.27 11 / 0
1.3.26 11 / 0
1.3.25 11 / 0
1.3.24 11 / 0
1.3.23 11 / 0
1.3.22 11 / 0
1.3.21 11 / 0
1.3.20 11 / 0
1.3.19 11 / 0
1.3.18 11 / 0
1.3.17 11 / 0
1.3.16 11 / 0
1.3.15 11 / 0
1.3.14 11 / 0
1.3.13 10 / 0
1.3.12 10 / 0
1.3.11 10 / 0
1.3.10 10 / 0
1.3.9 10 / 0
1.3.8 10 / 0
1.3.7 10 / 0
1.3.6 10 / 0
1.3.5 10 / 0
1.3.4 10 / 0
1.3.3 10 / 0
1.3.2 10 / 0
1.3.1 10 / 0
1.3.0 10 / 0
1.2.4 10 / 0
1.2.3 10 / 0
1.2.2 10 / 0
1.2.1 10 / 0
1.2.0 9 / 0
1.1.0 9 / 0
1.0.1 9 / 0
1.0.0 6 / 0
0.0.3 6 / 0

v1.3.37

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.3.36

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.3.35

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.3.34

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.