← Home

rip-lang

npm Repository Homepage
100
Versions
—
License
Yes
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

shreeve

Keywords

ripcompilerlanguages-expressionlispbunbrowserparsertranspilerjavascriptes2022coffeescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:shady-links-raw-ip AI (semgrep): Raw IP appears only in a comment documenting a default localhost dev-server URL, not in executable network code. ai
phantom-deps phantom-dep:@types/bun AI (phantom-deps): @types/bun is a type-declaration package loaded by convention, not via import statements. ai
source-diff obfuscated-file:docs/dist/rip.js AI (source-diff): Browser bundle built by the package's own build script; minified output is expected. ai
source-diff net-exec-file:docs/dist/rip.js AI (source-diff): Compiler bundle legitimately uses dynamic code execution (eval/new Function) as part of its language runtime. ai
source-diff net-exec-file:docs/dist/rip.min.js AI (source-diff): Minified browser bundle of the compiler; same rationale as rip.js. ai
source-diff net-exec-file:docs/dist/rip-ui.min.js AI (source-diff): Minified UI bundle for a language playground; network calls are fetch/XHR for compiler output, not exfiltration. ai
source-diff obfuscated-file:src/grammar/parser.js AI (source-diff): Generated LR parser with long symbol-table lines; header confirms Solar parser generator output, not obfuscation. ai
provenance missing-githead AI (provenance): Established package with 244 versions; missing gitHead alone is not a security signal for this package. ai
install-scripts install-script:postinstall AI (install-scripts): Compiler/language tool with 244 versions; postinstall is a documented setup step, not arbitrary remote code execution. ai
semgrep semgrep:new-function-constructor AI (semgrep): Used to bootstrap reactive/component runtime in browser context; expected pattern for a compile-to-JS language runtime. ai

Versions (showing 100 of 242)

Version Deps Published
3.16.2 2 / 0
3.15.4 0 / 1
3.15.3 0 / 1
3.15.1 0 / 1
3.15.0 1 / 1
3.14.4 0 / 1
3.14.2 0 / 1
3.14.1 0 / 1
3.14.0 0 / 1
3.13.137 0 / 1
3.13.136 0 / 1
3.13.135 0 / 1
3.13.134 0 / 1
3.13.133 0 / 1
3.13.132 0 / 1
3.13.131 0 / 1
3.13.130 0 / 1
3.13.129 0 / 1
3.13.128 0 / 1
3.13.127 0 / 1
3.13.126 0 / 1
3.13.125 0 / 1
3.13.124 0 / 1
3.13.123 0 / 1
3.13.122 0 / 1
3.13.121 0 / 1
3.13.120 0 / 1
3.13.119 0 / 1
3.13.118 0 / 1
3.13.117 0 / 1
3.13.116 0 / 1
3.13.115 0 / 1
3.13.114 0 / 1
3.13.113 0 / 1
3.13.112 0 / 1
3.13.111 0 / 1
3.13.110 0 / 1
3.13.109 0 / 1
3.13.108 0 / 1
3.13.107 0 / 1
3.13.106 0 / 1
3.13.105 0 / 1
3.13.104 0 / 1
3.13.103 0 / 1
3.13.102 0 / 1
3.13.101 0 / 1
3.13.100 0 / 1
3.13.99 0 / 1
3.13.98 0 / 1
3.13.97 0 / 1
3.13.96 0 / 1
3.13.95 0 / 1
3.13.94 0 / 1
3.13.93 0 / 1
3.13.92 0 / 1
3.13.91 0 / 1
3.13.90 0 / 1
3.13.89 0 / 1
3.13.88 0 / 1
3.13.87 0 / 1
3.13.86 0 / 1
3.13.85 0 / 1
3.13.84 0 / 1
3.13.83 0 / 1
3.13.82 0 / 1
3.13.81 0 / 1
3.13.80 0 / 1
3.13.79 0 / 1
3.13.78 0 / 0
3.13.77 0 / 0
3.13.76 0 / 0
3.13.75 0 / 0
3.13.74 0 / 0
3.13.73 0 / 0
3.13.72 0 / 0
3.13.71 0 / 0
3.13.70 0 / 0
3.13.69 0 / 0
3.13.68 0 / 0
3.13.67 0 / 0
3.13.66 0 / 0
3.13.65 0 / 0
3.13.64 0 / 0
3.13.63 0 / 0
3.13.62 0 / 0
3.13.61 0 / 0
3.13.60 0 / 0
3.13.59 0 / 0
3.13.58 0 / 0
3.13.57 0 / 0
3.13.56 0 / 0
3.13.55 0 / 0
3.13.54 0 / 0
3.13.53 0 / 0
3.13.52 0 / 0
3.13.51 0 / 0
3.13.49 0 / 0
3.13.48 0 / 0
3.13.47 0 / 0
3.13.46 0 / 0
Showing 100 of 242 Next page →