babylonjs-loaders
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:babylon.glTF2FileLoader.js | AI (source-diff): Standard UMD minified bundle for BabylonJS loader; not obfuscated, just minified distribution artifact. | ai | |
| source-diff | obfuscated-file:babylon.bvhFileLoader.js | AI (source-diff): Standard UMD minified bundle for BabylonJS loader; not obfuscated, just minified distribution artifact. | ai | |
| source-diff | obfuscated-file:babylon.glTF1FileLoader.js | AI (source-diff): Standard UMD minified bundle for BabylonJS loader; not obfuscated, just minified distribution artifact. | ai | |
| source-diff | obfuscated-file:babylon.stlFileLoader.js | AI (source-diff): Standard UMD minified bundle for BabylonJS loader; not obfuscated, just minified distribution artifact. | ai | |
| source-diff | obfuscated-file:babylon.glTFFileLoader.js | AI (source-diff): Standard UMD minified bundle for BabylonJS loader; not obfuscated, just minified distribution artifact. | ai | |
| source-diff | obfuscated-file:babylon.objFileLoader.js | AI (source-diff): Standard UMD minified bundle for BabylonJS loader; not obfuscated, just minified distribution artifact. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Fires in minified bundle output of a well-known 3D engine loader; stable pattern across versions. | ai |
Versions (showing 51 of 105)
| Version | Deps | Published |
|---|---|---|
| 9.17.1 | 2 / 3 | |
| 9.17.0 | 2 / 3 | |
| 9.16.2 | 2 / 3 | |
| 9.16.1 | 2 / 3 | |
| 9.16.0 | 2 / 3 | |
| 9.15.0 | 2 / 3 | |
| 9.14.0 | 2 / 3 | |
| 9.13.0 | 2 / 3 | |
| 9.12.1 | 2 / 3 | |
| 9.12.0 | 2 / 3 | |
| 9.11.0 | 2 / 3 | |
| 9.10.1 | 2 / 3 | |
| 9.10.0 | 2 / 3 | |
| 9.9.2 | 2 / 3 | |
| 9.9.1 | 2 / 3 | |
| 9.9.0 | 2 / 3 | |
| 9.8.0 | 2 / 3 | |
| 9.7.0 | 2 / 3 | |
| 9.6.2 | 2 / 3 | |
| 9.6.1 | 2 / 3 | |
| 9.6.0 | 2 / 3 | |
| 9.5.2 | 2 / 3 | |
| 9.5.1 | 2 / 3 | |
| 9.5.0 | 2 / 3 | |
| 9.4.1 | 2 / 8 | |
| 9.4.0 | 2 / 8 | |
| 9.3.4 | 2 / 8 | |
| 9.3.3 | 2 / 8 | |
| 9.3.2 | 2 / 8 | |
| 9.3.1 | 2 / 8 | |
| 9.3.0 | 2 / 8 | |
| 9.2.2 | 2 / 8 | |
| 9.2.1 | 2 / 8 | |
| 9.1.0 | 2 / 8 | |
| 9.0.0 | 2 / 7 | |
| 8.56.2 | 2 / 7 | |
| 8.56.1 | 2 / 7 | |
| 8.56.0 | 2 / 7 | |
| 8.55.4 | 2 / 7 | |
| 8.55.3 | 2 / 7 | |
| 8.55.2 | 2 / 7 | |
| 8.55.1 | 2 / 7 | |
| 8.55.0 | 2 / 7 | |
| 8.54.3 | 2 / 7 | |
| 8.54.2 | 2 / 7 | |
| 8.54.1 | 2 / 7 | |
| 8.54.0 | 2 / 7 | |
| 8.53.1 | 2 / 7 | |
| 8.53.0 | 2 / 7 | |
| 8.52.1 | 2 / 7 | |
| 8.52.0 | 2 / 7 |
v9.17.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.17.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.16.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.16.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.16.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.15.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.0.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.56.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.56.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.56.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.55.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.55.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.55.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.55.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.55.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.54.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.54.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.54.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.54.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.53.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.53.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.52.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v8.52.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.