localforage
Offline storage, improved.
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
tofumatt
Keywords
indexeddblocalstoragestoragewebsql
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:site/javascripts/jquery_ui.js | AI (source-diff): Minified jQuery UI v1.10.3 for the project's documentation site; clearly identified by header comment. Standard practice. | ai | |
| phantom-deps | phantom-dep:express | AI (phantom-deps): Build/dev dependency referenced in config; legitimate pattern for build tools. | ai | |
| phantom-deps | phantom-dep:coffee-script | AI (phantom-deps): Build/dev dependency referenced in config; legitimate pattern for build tools. | ai | |
| phantom-deps | phantom-dep:uglify-js | AI (phantom-deps): Build/dev dependency for minification; legitimate pattern for build tools. | ai | |
| source-diff | obfuscated-file:test/localforage.webpack.js | AI (source-diff): Standard webpack bundle in test directory; webpack bootstrap boilerplate, not obfuscated malicious code. Stable for this package. | ai | |
| source-diff | obfuscated-file:docs/scripts/flatdoc.js | AI (source-diff): Flatdoc (Rico Sta. Cruz) documentation rendering library in docs/ directory; standard open-source tooling, not obfuscated malware. | ai | |
| semgrep | semgrep:eval-usage | AI (semgrep): In examples/require.js — bundled RequireJS uses eval for module loading; standard AMD loader pattern. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Gruntfile.js dev tooling using path.resolve for test config; standard build pattern, not a runtime concern. | ai | |
| source-diff | net-exec-file:docs/scripts/legacy.js | AI (source-diff): HTML5 Shiv + matchMedia polyfill + Respond.js for docs site legacy browser support; well-known OSS libraries. | ai | |
| source-diff | net-exec-file:docs/scripts/jquery.min.js | AI (source-diff): jQuery v1.9.1 minified in docs/scripts/; standard documentation site asset, not malware. | ai |
Versions (showing 51 of 57)
| Version | Deps | Published |
|---|---|---|
| 1.10.0 | 1 / 38 | |
| 1.7.2 | 1 / 39 | |
| 1.7.1 | 1 / 39 | |
| 1.7.0 | 1 / 39 | |
| 1.6.0 | 1 / 39 | |
| 1.5.7 | 1 / 35 | |
| 1.5.6 | 1 / 35 | |
| 1.5.5 | 1 / 35 | |
| 1.5.4 | 1 / 35 | |
| 1.5.3 | 1 / 35 | |
| 1.5.2 | 1 / 35 | |
| 1.5.1 | 1 / 35 | |
| 1.5.0 | 1 / 35 | |
| 1.4.3 | 1 / 35 | |
| 1.4.2 | 1 / 35 | |
| 1.4.1 | 1 / 35 | |
| 1.4.0 | 1 / 27 | |
| 1.3.3 | 1 / 27 | |
| 1.3.2 | 1 / 27 | |
| 1.3.1 | 1 / 27 | |
| 1.3.0 | 1 / 27 | |
| 1.2.10 | 1 / 22 | |
| 1.2.9 | 1 / 18 | |
| 1.2.8 | 1 / 18 | |
| 1.2.7 | 1 / 18 | |
| 1.2.6 | 1 / 21 | |
| 1.2.4 | 1 / 18 | |
| 1.2.3 | 1 / 17 | |
| 1.2.2 | 1 / 17 | |
| 1.2.1 | 1 / 17 | |
| 1.2.0 | 1 / 17 | |
| 1.1.1 | 1 / 17 | |
| 1.1.0 | 1 / 17 | |
| 1.0.4 | 1 / 17 | |
| 1.0.3 | 1 / 17 | |
| 1.0.2 | 1 / 17 | |
| 1.0.1 | 1 / 17 | |
| 1.0.0 | 1 / 17 | |
| 0.9.3 | 1 / 17 | |
| 0.9.2 | 0 / 17 | |
| 0.9.1 | 0 / 16 | |
| 0.9.0 | 0 / 16 | |
| 0.8.1 | 0 / 12 | |
| 0.8.0 | 0 / 12 | |
| 0.7.0 | 0 / 12 | |
| 0.6.2 | 0 / 11 | |
| 0.6.1 | 0 / 11 | |
| 0.6.0 | 0 / 11 | |
| 0.4.3 | 0 / 11 | |
| 0.4.1 | 0 / 11 | |
| 0.4.0 | 0 / 11 |