gonzales-pe
Gonzales Preprocessor Edition (fast CSS parser)
36
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
tonyganch
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:lib/less/parse.js | AI (source-diff): Babel build output of LESS parser logic; long lines from minification, not obfuscation. | ai | |
| source-diff | obfuscated-file:lib/scss/parse.js | AI (source-diff): Babel build output of SCSS parser logic; long lines from minification, not obfuscation. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Dynamic require loads syntax modules (css/scss/sass/less) by name — core functionality of a multi-syntax CSS parser. | ai | |
| source-diff | obfuscated-file:lib/css/parse.js | AI (source-diff): Babel build output of CSS parser logic; long lines from minification, not obfuscation. Confirmed by jscs:disable comment and devDep on babel. | ai | |
| source-diff | obfuscated-file:lib/sass/parse.js | AI (source-diff): Babel build output of SASS parser logic; long lines from minification, not obfuscation. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): gonzales-pe is a mature CSS parser (4575 days old, 69 versions). Infrequent releases are expected for a stable utility library; dormancy alone is not a risk signal here. | ai | |
| provenance | publisher-changed | AI (provenance): tonyganch is the documented author of gonzales-pe; the repo, homepage, and author fields all match. The change from jdalton to tonyganch reflects the original author reclaiming direct publish rights. | ai |
Versions (showing 36 of 36)
| Version | Deps | Published |
|---|---|---|
| 4.3.0 | 1 / 12 | |
| 4.2.4 | 1 / 12 | |
| 4.2.3 | 1 / 12 | |
| 4.2.2 | 1 / 12 | |
| 4.1.1 | 1 / 12 | |
| 4.0.3 | 1 / 12 | |
| 4.0.2 | 1 / 12 | |
| 4.0.1 | 1 / 12 | |
| 3.4.7 | 1 / 9 | |
| 3.4.6 | 1 / 9 | |
| 3.4.5 | 1 / 9 | |
| 3.4.4 | 1 / 9 | |
| 3.4.3 | 1 / 9 | |
| 3.4.2 | 1 / 9 | |
| 3.4.1 | 1 / 9 | |
| 3.4.0 | 1 / 9 | |
| 3.3.6 | 1 / 7 | |
| 3.3.5 | 1 / 7 | |
| 3.3.4 | 1 / 7 | |
| 3.3.3 | 1 / 7 | |
| 3.3.2 | 1 / 7 | |
| 3.3.1 | 1 / 7 | |
| 3.2.7 | 1 / 5 | |
| 3.2.5 | 1 / 5 | |
| 3.2.2 | 1 / 5 | |
| 3.2.1 | 1 / 5 | |
| 3.2.0 | 1 / 5 | |
| 3.1.1 | 1 / 5 | |
| 3.1.0 | 1 / 5 | |
| 3.0.3 | 1 / 5 | |
| 3.0.2 | 1 / 5 | |
| 3.0.1 | 1 / 5 | |
| 3.0.0 | 1 / 5 | |
| 2.0.2 | 0 / 2 | |
| 2.0.1 | 0 / 2 | |
| 2.0.0 | 0 / 2 |