golar
23
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
auvred
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/thirdparty/typescript-go/_packages/ast/dist/visitor.js | AI (source-diff): Bundled typescript-go AST visitor; long lines from named imports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/unstable-tsgo.js | AI (source-diff): Top-level re-export bundle of typescript-go AST; long import lines, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/thirdparty/typescript-go/_packages/ast/dist/index.js | AI (source-diff): Bundled typescript-go AST index; long lines are a large re-export list, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/thirdparty/typescript-go/_packages/ast/dist/is.js | AI (source-diff): Bundled typescript-go AST type-guards; long lines from minified but readable TS compiler code. | ai | |
| source-diff | obfuscated-file:dist/thirdparty/typescript-go/_packages/ast/dist/factory.js | AI (source-diff): Bundled typescript-go AST factory; long lines from minified but readable TS compiler code, not obfuscation. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by bundling typescript-go AST package; consistent with package purpose. | ai | |
| source-diff | large-new-source-files | AI (source-diff): 109 new files from bundled typescript-go AST subpackage; expected for this feature addition. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Package has 25 versions and 4 approved dependents; 0.0.0 is a namespace reservation, not a throwaway malicious package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established package with multiple versions and inbound approved edges; sparse metadata reflects early-stage development, not spam. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Intentional omission; package has a homepage and repo; not indicative of malice. | ai |
Versions (showing 23 of 23)
| Version | Deps | Published |
|---|---|---|
| 0.1.7 | 3 / 0 | |
| 0.1.6 | 3 / 0 | |
| 0.1.5 | 2 / 0 | |
| 0.1.4 | 2 / 0 | |
| 0.1.3 | 1 / 0 | |
| 0.1.2 | 1 / 0 | |
| 0.1.1 | 1 / 0 | |
| 0.1.0 | 1 / 0 | |
| 0.0.17 | 0 / 0 | |
| 0.0.16 | 0 / 0 | |
| 0.0.15 | 0 / 0 | |
| 0.0.14 | 0 / 0 | |
| 0.0.13 | 0 / 0 | |
| 0.0.12 | 0 / 0 | |
| 0.0.11 | 0 / 0 | |
| 0.0.10 | 0 / 0 | |
| 0.0.9 | 0 / 0 | |
| 0.0.8 | 0 / 0 | |
| 0.0.7 | 0 / 0 | |
| 0.0.6 | 0 / 0 | |
| 0.0.3 | 0 / 0 | |
| 0.0.2 | 0 / 0 | |
| 0.0.0 | 0 / 0 |