node-opcua-crypto
Crypto tools for Node-OPCUA
12
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
erossignon
Keywords
OPCUAopcuam2miotopc uainternet of things
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/source/index_web.cjs | AI (source-diff): Standard tsup CJS bundle output; long lines are minified build artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index.cjs | AI (source-diff): Standard tsup CJS bundle output; long lines are minified build artifacts, not obfuscation. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): SLSA provenance attestation confirms legitimate CI/CD publish; dormancy is not a concern here. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): chalk is used in npm scripts; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@types/sshpk | AI (phantom-deps): @types packages loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@types/jsrsasign | AI (phantom-deps): @types packages loaded by convention; stable false positive. | ai |