google-closure-compiler-js
Check, compile, optimize and compress Javascript with Closure-Compiler using Java
63
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
blicklybrad4dchadhikeslharkersamthor
Keywords
javascriptcompileroptimizerminifierclosure
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Both lharker and blickly are Google engineers on the Closure Compiler project; maintainer transitions within the same org are expected and not a risk signal for this package. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process is used in build_compiler.js, a dev/build script invoked only during testing, not at install or runtime. Expected for a compiler toolchain package. | ai |