@injectivelabs/sdk-ts
SDK in TypeScript for building Injective applications in a browser, node, and react native environment.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/cjs/index-DKhvDHXW.d.cts | AI (source-diff): Long-line TypeScript declaration rollup file; expected artifact of bundler-generated type output for this large SDK. | ai | |
| source-diff | obfuscated-file:dist/esm/index-C0N3QEU7.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler chunk splitting; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-g0uzXEw3.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler chunk splitting; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-Dx2YEV9Z.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler tree-shaking; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-Ca1rPd7K.js | AI (source-diff): Bundled ESM output with long import lines; standard bundler artifact for this large SDK. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-C4RxZ9ZV.js | AI (source-diff): Standard bundler-generated ESM chunk with hashed filename; content shows normal Injective SDK imports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-Lta8gUTs.d.cts | AI (source-diff): Standard bundler-generated TypeScript declaration file with hashed filename; long lines are normal for bundled .d.cts output. | ai | |
| source-diff | obfuscated-file:dist/esm/index-D-DmLuDM.d.ts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-Be2xjcqA.d.cts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/index-BFDdHSKv.d.ts | AI (source-diff): TypeScript declaration file with many re-exports on one line; standard bundler output. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-Cbh6Sv37.d.cts | AI (source-diff): Long lines are bundler-generated TypeScript declaration files with many re-exports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/index-a4qvY7Ae.d.ts | AI (source-diff): TypeScript declaration file with long bundler-generated import lines; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-ohjlOX6p.js | AI (source-diff): Bundled ESM output with long import lines from tsdown/rollup tree-shaking; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-rqzTzOSi.d.cts | AI (source-diff): TypeScript declaration file with long bundler-generated import lines; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-D8VsT7vx.d.cts | AI (source-diff): Long-line bundler output (TypeScript declaration file with many re-exports); not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/index-BV37472H.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-NhwLKHgP.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/index-CjZmfDXT.d.ts | AI (source-diff): Bundler-generated type declaration with long import lines; not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-D4csRrjf.d.cts | AI (source-diff): Bundler-generated type declaration with long import lines; not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/index-DFTOkhWv.d.ts | AI (source-diff): Same as above — ESM variant of bundled .d.ts rollup; false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-VKrX1Enj.d.cts | AI (source-diff): Bundled TypeScript declaration file with long import lines; not obfuscated code, stable pattern for this SDK. | ai | |
| source-diff | obfuscated-file:dist/esm/index-53Nc40Ah.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-Bl5qIcb9.js | AI (source-diff): Rollup/tsdown bundle chunk; long lines are import statements from tree-shaking, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-BU32_7AB.d.cts | AI (source-diff): Bundler-generated chunk with long import lines; not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-d95UiY0V.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-tIx6OFg9.js | AI (source-diff): Bundled ESM output with long import lines; standard tsdown/rollup artifact for this SDK. | ai | |
| source-diff | obfuscated-file:dist/esm/index-B7rS5iIF.d.ts | AI (source-diff): TypeScript declaration file with long bundler-generated import lines; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-DGHZJt7G.d.cts | AI (source-diff): TypeScript declaration file with long bundler-generated import lines; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-BNYIha2C.js | AI (source-diff): Bundled ESM output with long import statements; standard tsdown build artifact for this SDK. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-C_ioefRg.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/index-Bn3JkjMQ.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-Cz0vkasG.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-BN6xAObK.js | AI (source-diff): Bundled ESM output with long import lines; standard tsdown build artifact for this SDK. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-YmLrS29a.d.cts | AI (source-diff): Long lines are bundler-generated TypeScript declaration files with many re-exports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-DYNILG8y.d.cts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-CWhjd9Yp.js | AI (source-diff): Bundler-generated ESM chunk with long import lines; readable named imports from known packages. | ai | |
| source-diff | obfuscated-file:dist/esm/index-DvOw3RHi.d.ts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-D1bWAXoi.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-BpZGNLUP.js | AI (source-diff): Bundled ESM output with long import lines; standard tsdown/rollup output for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-CCP5OcIu.js | AI (source-diff): Rollup/tsdown chunk with long import lines; all imports are known packages. Standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/esm/index-C4ebvHUB.d.ts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/utils-D-LVHEfQ.js | AI (source-diff): Bundled utility chunk; readable code visible in sample. Standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-DJm-qDcY.d.cts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-BWUlFM6L.js | AI (source-diff): Bundled ESM chunk with long import lines; standard tsdown/vite output for this SDK. | ai | |
| source-diff | obfuscated-file:dist/esm/index-DFreudT5.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-ByRa2IE-.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-CeD0R82a.js | AI (source-diff): Bundled ESM chunk with long import lines; standard tsdown/rollup output for this large SDK. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large SDK with 1535 versions; new bundler chunks are expected across releases. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-Dz6elmkG.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-CDh-fE3h.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/index-DLvkfrR5.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-CnbW6OG0.js | AI (source-diff): Bundled ESM chunk with long import lines; standard tsdown/rollup output for this large SDK. | ai | |
| phantom-deps | phantom-dep:graphql | AI (phantom-deps): graphql is an optional peer dep exposed via ./graphql export path; not directly imported in main bundle. | ai | |
| phantom-deps | phantom-dep:@noble/hashes | AI (phantom-deps): @noble/hashes is a declared runtime dep used by crypto utilities; phantom-dep heuristic misfires here. | ai | |
| phantom-deps | phantom-dep:google-protobuf | AI (phantom-deps): google-protobuf is a proto runtime dep used transitively; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:shx | AI (phantom-deps): shx is a build-time tool used in scripts, not a runtime import; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/index-Hj2qOUud.d.ts | AI (source-diff): Same pattern — bundled .d.ts type declaration with long import lines; false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-UE9sXMcw.d.cts | AI (source-diff): Bundled TypeScript declaration file with long import lines; not obfuscated code, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/index-RA5Nj5kd.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundled type rollup; not executable obfuscation. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Package has 1511 versions; active SDK with CI/CD publishing via GitHub Actions with SLSA provenance. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-B7UsSUbZ.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundled type rollup; not executable obfuscation. | ai | |
| phantom-deps | phantom-dep:@injectivelabs/grpc-web-node-http-transport | AI (phantom-deps): Same-org transport dep; declared for peer resolution, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@protobuf-ts/runtime | AI (phantom-deps): Referenced in config files for type generation; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@injectivelabs/grpc-web-react-native-transport | AI (phantom-deps): Same-org transport dep; declared for peer resolution, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@injectivelabs/grpc-web | AI (phantom-deps): Same-org transport dep; declared for peer resolution, not directly imported in source. | ai |
Versions (showing 51 of 85)
| Version | Deps | Published |
|---|---|---|
| 1.20.7 | 32 / 0 | |
| 1.20.6 | 32 / 0 | |
| 1.20.1 | 32 / 0 | |
| 1.19.29 | 32 / 0 | |
| 1.19.27 | 32 / 0 | |
| 1.19.24 | 32 / 0 | |
| 1.19.22 | 32 / 0 | |
| 1.19.20 | 32 / 0 | |
| 1.19.17 | 32 / 0 | |
| 1.19.14 | 31 / 0 | |
| 1.19.13 | 31 / 0 | |
| 1.19.12 | 31 / 0 | |
| 1.19.11 | 31 / 0 | |
| 1.19.10 | 31 / 0 | |
| 1.19.9 | 31 / 0 | |
| 1.19.8 | 31 / 0 | |
| 1.19.6 | 31 / 0 | |
| 1.19.4 | 31 / 0 | |
| 1.19.3 | 31 / 0 | |
| 1.19.2 | 31 / 0 | |
| 1.19.1 | 31 / 0 | |
| 1.18.21 | 31 / 0 | |
| 1.18.19 | 31 / 0 | |
| 1.18.18 | 31 / 0 | |
| 1.18.8 | 31 / 0 | |
| 1.18.7 | 31 / 0 | |
| 1.18.6 | 31 / 0 | |
| 1.18.5 | 31 / 0 | |
| 1.18.4 | 31 / 0 | |
| 1.18.1 | 31 / 0 | |
| 1.17.9 | 31 / 0 | |
| 1.17.6 | 30 / 0 | |
| 1.17.5 | 30 / 0 | |
| 1.17.4 | 30 / 0 | |
| 1.17.3 | 30 / 0 | |
| 1.17.2 | 30 / 0 | |
| 1.16.38 | 32 / 3 | |
| 1.16.35 | 32 / 3 | |
| 1.16.34 | 32 / 3 | |
| 1.16.33 | 32 / 3 | |
| 1.16.32 | 32 / 3 | |
| 1.16.31 | 32 / 3 | |
| 1.16.30 | 32 / 3 | |
| 1.16.28 | 32 / 3 | |
| 1.16.27 | 32 / 3 | |
| 1.16.24 | 32 / 3 | |
| 1.16.21 | 32 / 3 | |
| 1.16.20 | 32 / 3 | |
| 1.16.19 | 32 / 3 | |
| 1.16.18 | 32 / 3 | |
| 1.16.16 | 32 / 3 |
v1.20.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.20.6
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.20.1
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.29
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.27
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.24
6 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.22
6 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.20
6 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.17
6 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.14
5 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.13
5 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.12
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.11
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.10
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.9
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.8
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.6
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.4
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.3
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.2
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.21
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.19
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.18
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.8
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.7
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.6
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.5
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.4
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.1
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.9
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.6
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.5
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.4
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.3
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.16.38
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.35
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.34
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.33
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.32
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.31
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.30
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.28
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.27
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.24
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.21
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.19
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.18
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.