@forinda/kickjs-cli
CLI for KickJS — project scaffolding, DDD module generation, dev/build/start
1
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
forinda
Keywords
kickjsnodejstypescriptdecorator-drivencli-toolscaffoldingcode-generatorproject-generatorddd-generatordomain-driven-designhmr
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/project-docs-CIzEv44w.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-u58MFV45.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/typegen-CuciH349.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/doctor-D6Vqf-Ws.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/config-DQFyBrSP.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/config-G8kmxDyZ.mjs | AI (source-diff): Standard rolldown bundle output; readable CLI config logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/doctor-KBy5WFZJ.mjs | AI (source-diff): Standard rolldown bundle output; readable DDD module generation logic, no malicious patterns. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): 111 versions published via automated CI/CD pipeline with SLSA provenance; rapid publish is expected pattern. | ai | |
| source-diff | obfuscated-file:dist/typegen-C7AgyPIB.mjs | AI (source-diff): Standard rolldown bundle output; readable type generation logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-Bql3IbaE.mjs | AI (source-diff): Standard rolldown bundle output; readable CLI plugin runner logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/project-docs-DKOLHfqu.mjs | AI (source-diff): Standard rolldown bundle output; readable file/prompt utilities, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/doctor-shX-k8ju.mjs | AI (source-diff): Standard rolldown bundle output with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-DPATg8Ix.mjs | AI (source-diff): Standard rolldown bundle output with MIT header; uses oxc-parser for AST scanning. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-COniKxrL.mjs | AI (source-diff): Standard rolldown bundle output with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/project-docs-Cq_MswOY.mjs | AI (source-diff): Standard rolldown bundle output with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/config-Dc4XuP2E.mjs | AI (source-diff): Standard rolldown bundle output with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/config-DLy6JCCy.mjs | AI (source-diff): Rolldown/tsdown bundler output; long lines are minified ESM, not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-CubT9x_A.mjs | AI (source-diff): Rolldown/tsdown bundler output; legitimate CLI code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/project-docs-CqOymvmb.mjs | AI (source-diff): Rolldown/tsdown bundler output; legitimate CLI code visible in sample. | ai | |
| phantom-deps | phantom-dep:oxc-parser | AI (phantom-deps): oxc-parser is used in bundled dist output (typegen chunk); phantom-dep fires because direct import is in bundled file, not raw source. | ai | |
| source-diff | obfuscated-file:dist/typegen-BJwy65-p.mjs | AI (source-diff): Rolldown/tsdown bundler output; oxc-parser usage for AST scanning visible in sample. | ai | |
| source-diff | obfuscated-file:dist/doctor-CcVNNzGj.mjs | AI (source-diff): Rolldown/tsdown bundler output; legitimate CLI code visible in sample. | ai | |
| source-diff | obfuscated-file:dist/doctor-559QZlHi.mjs | AI (source-diff): Standard rolldown bundler output; long lines are minified ESM, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/typegen-CwtvFZ0t.mjs | AI (source-diff): Standard rolldown bundler output; long lines are minified ESM, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-BAYoDnFI.mjs | AI (source-diff): Standard rolldown bundler output; long lines are minified ESM, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/project-docs-CrfNQIZA.mjs | AI (source-diff): Standard rolldown bundler output; long lines are minified ESM, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/config-DSpcRefL.mjs | AI (source-diff): Standard rolldown bundler output; long lines are minified ESM, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/config-DdtRfl33.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-B2_AT35s.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle; sampled code shows plugin/scaffold orchestration only. | ai | |
| source-diff | obfuscated-file:dist/project-docs-C-dA6-TO.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle; sampled code shows file I/O and prompt utilities only. | ai | |
| phantom-deps | phantom-dep:@forinda/kickjs-db | AI (phantom-deps): Same-org dep; likely used indirectly through bundled output rather than direct import. | ai | |
| phantom-deps | phantom-dep:commander | AI (phantom-deps): CLI tool; commander is a declared dep used via bin entrypoint, not directly imported in scanned files. | ai | |
| source-diff | obfuscated-file:dist/typegen-5MX2F5iL.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle; sampled code shows type-scanning logic only. | ai | |
| source-diff | obfuscated-file:dist/doctor-SUUDEI1J.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle; sampled code shows CLI scaffolding logic only. | ai | |
| source-diff | obfuscated-file:dist/builtins-BCRm8cUp.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/typegen-SyGEEyKv.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/typegen-CgWQM1FH.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-CsT2e6Fj.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/builtins-BbJqgLmS.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/config-DW9HQc2u.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/doctor-Cin9GYv9.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/project-docs-CjnHf0Wd.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-fsoovaEF.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-CSLwAvgI.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/config-Cf8GU8CG.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with source maps; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-M_WVt-7a.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with source maps; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-CezcLjMb.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with source maps; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/project-docs-CfB-KVN5.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with source maps; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/doctor-Dl709LzL.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with source maps; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/doctor-Brw2ruus.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/project-docs-Bh20nvAP.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-w_kqfVLL.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/typegen-CFtS0A1P.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/config-BnCPYsQu.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-Bd3BvtoI.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header and readable Node built-in imports; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/typegen-DinUVd0x.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header and readable Node built-in imports; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/builtins-BcviNYA8.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header and readable Node built-in imports; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/builtins-Ch3SpH4z.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header and readable Node built-in imports; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/typegen-CmY9IXTJ.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header and readable Node built-in imports; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/typegen-B4_u3xBO.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-DjQVbh56.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/builtins-C218lGrx.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/builtins-BqaW8JR2.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/typegen-BwZ1fbLq.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/typegen-VziXMsqI.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; consistent with build tooling for this CLI package. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-Ba3TqDk4.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; consistent with build tooling for this CLI package. | ai | |
| source-diff | obfuscated-file:dist/builtins-DC1UyGqc.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; consistent with build tooling for this CLI package. | ai | |
| source-diff | obfuscated-file:dist/builtins-B1iai4Mu.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; consistent with build tooling for this CLI package. | ai | |
| source-diff | obfuscated-file:dist/typegen-Dnc6bshx.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; consistent with build tooling for this CLI package. | ai | |
| source-diff | obfuscated-file:dist/typegen-BEWcYO4F.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in samples. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-B0VOAwMA.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in samples. | ai | |
| source-diff | obfuscated-file:dist/builtins-f9GCF9UO.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in samples. | ai | |
| source-diff | obfuscated-file:dist/builtins-B9mT_e0x.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in samples. | ai | |
| source-diff | obfuscated-file:dist/typegen-B05WVNbq.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in samples. | ai | |
| source-diff | obfuscated-file:dist/project-docs-LqGoslXZ.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with MIT header; no obfuscation or malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-B3Ooiczg.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with MIT header; no obfuscation or malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-Cd0w7Al-.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with MIT header; no obfuscation or malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/config-icjz-b4f.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with MIT header; no obfuscation or malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/doctor-BrkA44Gz.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle with MIT header; no obfuscation or malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-D2SRJqzb.mjs | AI (source-diff): Standard rolldown/tsdown bundler output; MIT header, readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/config-CKv4zZ7y.mjs | AI (source-diff): Standard rolldown/tsdown bundler output; MIT header, readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/doctor-Cl-wlutc.mjs | AI (source-diff): Standard rolldown/tsdown bundler output; MIT header, readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/project-docs-f1JR5er_.mjs | AI (source-diff): Standard rolldown/tsdown bundler output; MIT header, readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-Bo2XztpK.mjs | AI (source-diff): Standard rolldown/tsdown bundler output; MIT header, readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/config-BXTsAmnY.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; readable CLI tool code with no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-C6c4B6mA.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; readable CLI tool code with no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-CPnfwUUk.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; readable CLI tool code with no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/project-docs-CGn7Z7h9.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; readable CLI tool code with no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/doctor-BX8eDq-O.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; readable CLI tool code with no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-DzmDwZvN.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/builtins-CB0cpCRy.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/builtins-DNnIUbGs.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-Ds2fzYZS.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-COBqEd4w.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-BY8RdkXt.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output with license header and source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/config-0Kk83nQ_.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output with license header and source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-DO7Lmj9A.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output with license header and source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/project-docs-D-qp0Ey7.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output with license header and source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-D1yEXkCX.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output with license header and source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/config-BlM3L0kV.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/typegen-CGrhe0Ta.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-D_jHPl16.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/project-docs-DkHcUaf1.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-D8q_Dcqh.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/config-C58Eekb2.mjs | AI (source-diff): Standard rolldown bundler minification output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-qeJ8k2Pi.mjs | AI (source-diff): Standard rolldown bundler minification output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/project-docs-DpdbqsFZ.mjs | AI (source-diff): Standard rolldown bundler minification output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-VtAaa5qD.mjs | AI (source-diff): Standard rolldown bundler minification output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-DZGjDSOf.mjs | AI (source-diff): Standard rolldown bundler minification output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/builtins-DYktFyU-.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header; not obfuscated, just minified CLI dist. | ai | |
| source-diff | obfuscated-file:dist/typegen-CYaoTJ6r.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header; not obfuscated, just minified CLI dist. | ai | |
| source-diff | obfuscated-file:dist/typegen-COED-VIb.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header; not obfuscated, just minified CLI dist. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-m04pTdQi.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header; not obfuscated, just minified CLI dist. | ai | |
| source-diff | obfuscated-file:dist/builtins-DXPOvADa.mjs | AI (source-diff): Standard rolldown/tsdown bundler output with MIT header; not obfuscated, just minified CLI dist. | ai | |
| source-diff | obfuscated-file:dist/builtins-CnQ6lxcV.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/typegen-CYA1y8NJ.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/typegen-CFW1vIgv.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-BNgcYlom.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/builtins-BxGfcEP6.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output for a CLI tool; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-D4D7ANu6.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; code is readable and benign. | ai | |
| source-diff | obfuscated-file:dist/typegen-CL2GzEgc.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; code is readable and benign. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-BiLXFAaa.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; code is readable and benign. | ai | |
| source-diff | obfuscated-file:dist/project-docs-B5xYM3MX.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; code is readable and benign. | ai | |
| source-diff | obfuscated-file:dist/config-Bo4xxPHs.mjs | AI (source-diff): Standard rolldown/tsdown bundle output; code is readable and benign. | ai | |
| source-diff | obfuscated-file:dist/config-DKQcNKrg.mjs | AI (source-diff): Standard rolldown/tsdown bundle output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/typegen-BK-C_dMm.mjs | AI (source-diff): Standard rolldown/tsdown bundle output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-BE1Dakam.mjs | AI (source-diff): Standard rolldown/tsdown bundle output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/project-docs-DRR0mSJy.mjs | AI (source-diff): Standard rolldown/tsdown bundle output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-CVVCnF6w.mjs | AI (source-diff): Standard rolldown/tsdown bundle output with MIT header and source maps; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/builtins-DBzZkJey.mjs | AI (source-diff): Standard rolldown/tsdown minified CLI bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-DDQJNnUl.mjs | AI (source-diff): Standard rolldown/tsdown minified CLI bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-Bl9kUVNL.mjs | AI (source-diff): Standard rolldown/tsdown minified CLI bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-Bn2aH7kY.mjs | AI (source-diff): Standard rolldown/tsdown minified CLI bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/builtins-K-nRJcJG.mjs | AI (source-diff): Standard rolldown/tsdown minified CLI bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/builtins-WmcOB_BH.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/typegen-BcmvYXaW.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/typegen-B-504b6a.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-C8B3jDpA.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/builtins-CTv3_NFH.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with MIT header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-ChoCJW23.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with license header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/typegen-B8lAhWXz.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with license header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-Bg8kTYfa.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with license header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/config-v6vsVMtc.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM bundle with license header; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-BXLt3Tp_.mjs | AI (source-diff): Minified rolldown/tsdown build output with source maps; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/typegen-C3G375CR.mjs | AI (source-diff): Minified rolldown/tsdown build output with source maps; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-Cvgyo_th.mjs | AI (source-diff): Minified rolldown/tsdown build output with source maps; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/config-ierHW69f.mjs | AI (source-diff): Minified rolldown/tsdown build output with source maps; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-Cd2DU_XX.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; no malicious patterns in sampled code. | ai | |
| phantom-deps | phantom-dep:jiti | AI (phantom-deps): jiti is used at runtime for config loading via dynamic import; bundled code resolves it without static import statements. | ai | |
| source-diff | obfuscated-file:dist/typegen-D-1Q9yBD.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/run-plugins-DaO1FtZb.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/config-BQUzGk6m.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; no malicious patterns in sampled code. | ai | |
| source-diff | obfuscated-file:dist/builtins-5aWa9xTa.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-DyXcnNCk.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-CZMLNEJQ.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-CEYm6tuj.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/builtins-BpWIctor.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle output; MIT header present, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/builtins-BIiKePdP.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle; MIT header, clean imports, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-DyhkvERd.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle; MIT header, clean imports, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-BL07Yyj4.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle; MIT header, clean imports, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-DSIVI-lg.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle; MIT header, clean imports, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/builtins-DI-a8PeJ.mjs | AI (source-diff): Standard rolldown/tsdown minified bundle; MIT header, clean imports, no malicious patterns. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher is GitHub Actions with SLSA provenance attestation; this is the documented CI/CD publish pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/builtins-BdvmVAJ1.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM output with MIT header; no malicious patterns. | ai | |
| phantom-deps | phantom-dep:@clack/prompts | AI (phantom-deps): @clack/prompts is imported in bundled dist files; phantom-dep heuristic misses bundled imports. | ai | |
| phantom-deps | phantom-dep:picocolors | AI (phantom-deps): picocolors is imported in bundled dist files; phantom-dep heuristic misses bundled imports. | ai | |
| phantom-deps | phantom-dep:pluralize | AI (phantom-deps): pluralize is imported in bundled dist files; phantom-dep heuristic misses bundled imports. | ai | |
| phantom-deps | phantom-dep:oxfmt | AI (phantom-deps): oxfmt is dynamically imported at runtime in the bundle; phantom-dep heuristic misses this. | ai | |
| phantom-deps | phantom-dep:glob | AI (phantom-deps): glob is imported in bundled dist files; phantom-dep heuristic misses bundled imports. | ai | |
| source-diff | obfuscated-file:dist/typegen-CBI7dNXr.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM output with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/typegen-C6ZfoYTC.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM output with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/builtins-Du70nybS.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM output with MIT header; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/generator-extension-Cp5FUUAw.mjs | AI (source-diff): Standard rolldown/tsdown minified ESM output with MIT header; no malicious patterns. | ai | |
| provenance | no-provenance | AI (provenance): New package without provenance setup; common for early-stage monorepo packages. | ai |
Versions (showing 1 of 105)
| Version | Deps | Published |
|---|---|---|
| 0.3.0 | 1 / 5 |
v0.3.0
1 finding
INFO
No provenance attestation
provenance
[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.