← Home

@veupathdb/clinepi-site

12
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

veupathdbbotdmfalkeryanrdoherty

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/bundles/legacy/733.bundle-a139a84abdf3f534c928.js AI (source-diff): Standard webpack minified bundle; readable React UI code in sample, no malicious patterns. ai
source-diff obfuscated-file:dist/bundles/legacy/797.bundle-8014ce4aacf09c1f019b.js AI (source-diff): Standard webpack minified bundle; readable React UI code in sample, no malicious patterns. ai
source-diff obfuscated-file:dist/bundles/modern/797.bundle-29d683ad93423731dc5d.js AI (source-diff): Standard webpack minified bundle; readable React UI code in sample, no malicious patterns. ai
source-diff obfuscated-file:dist/bundles/modern/733.bundle-bd168a755d4d43120a61.js AI (source-diff): Standard webpack minified bundle; readable React UI code in sample, no malicious patterns. ai
source-diff obfuscated-file:dist/bundles/legacy/166.bundle-a8450b2a0dabea4ccadd.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline. ai
source-diff obfuscated-file:dist/bundles/legacy/496.bundle-c8f34abb64741d491bbb.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline. ai
source-diff obfuscated-file:dist/bundles/modern/496.bundle-a428cdfe1084159b3a82.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline. ai
source-diff obfuscated-file:dist/bundles/modern/166.bundle-552bff53b18ce65b44ff.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/496.bundle-8e534b66df89d8d63d6b.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/951.bundle-d2bbe9a50894345ac3e1.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/951.bundle-2b6f2a492ee2e3786b36.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/797.bundle-d734b0d96ccd1e1f86dc.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/797.bundle-a77e60f8328e4e3bd8d2.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. ai
source-diff obfuscated-file:dist/bundles/modern/496.bundle-6a7ed71305d6ec81703f.js AI (source-diff): Standard webpack minified bundle from VEuPathDB build pipeline; not malicious obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/166.bundle-3e5a0294ac560031f530.js AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. ai
npm-metadata no-description AI (npm-metadata): Established VEuPathDB org package; empty description is a known pattern across their packages, not a malware signal. ai
source-diff obfuscated-file:dist/bundles/legacy/592.bundle-c8c45906e164fa03ff45.js AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. ai
source-diff obfuscated-file:dist/bundles/modern/592.bundle-352a569a2d38a946f374.js AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. ai
source-diff obfuscated-file:dist/bundles/legacy/496.bundle-d7e37d58211348ca884c.js AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. ai
source-diff obfuscated-file:dist/bundles/modern/496.bundle-11f2940303150da9f377.js AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build. ai
source-diff obfuscated-file:dist/bundles/modern/166.bundle-1c1bf21f667562cf5799.js AI (source-diff): Standard webpack minified bundle from VEuPathDB monorepo CI build; not malicious obfuscation. ai
source-diff obfuscated-file:dist/bundles/legacy/496.bundle-a4b3b71992aa5821da5d.js AI (source-diff): Standard webpack production bundle; readable React code, consistent with this package's build pipeline. ai
source-diff obfuscated-file:dist/bundles/modern/496.bundle-09e0997b399557c26cbd.js AI (source-diff): Standard webpack production bundle; readable React code, consistent with this package's build pipeline. ai
source-diff obfuscated-file:dist/bundles/modern/797.bundle-27b9fe39fa7f03eb1355.js AI (source-diff): Standard webpack production bundle for this package. ai
source-diff obfuscated-file:dist/bundles/modern/166.bundle-31fc83632db28de9c138.js AI (source-diff): Standard webpack production bundle for this package; readable React code visible in samples. ai
source-diff obfuscated-file:dist/bundles/legacy/166.bundle-89d6d35f97b72c2041d7.js AI (source-diff): Standard webpack production bundle for this package. ai
source-diff obfuscated-file:dist/bundles/modern/444.bundle-3b7cf2c4ce9161610a3c.js AI (source-diff): Standard webpack production bundle for this package. ai
source-diff obfuscated-file:dist/bundles/legacy/444.bundle-de27d6f41b1427ff0e9e.js AI (source-diff): Standard webpack production bundle for this package. ai
source-diff obfuscated-file:dist/bundles/legacy/496.bundle-531dd6f5e2faaf79baff.js AI (source-diff): Standard webpack production bundle for this package. ai
source-diff obfuscated-file:dist/bundles/modern/496.bundle-f375d0e1656ea4e80da8.js AI (source-diff): Standard webpack production bundle for this package. ai
source-diff obfuscated-file:dist/bundles/modern/592.bundle-dffff091210a80232abc.js AI (source-diff): Standard webpack production bundle for this package. ai
source-diff obfuscated-file:dist/bundles/legacy/592.bundle-fb91717ec12d4efdbe50.js AI (source-diff): Standard webpack production bundle for this package. ai
source-diff obfuscated-file:dist/bundles/legacy/797.bundle-9c433ce562506ad98eeb.js AI (source-diff): Standard webpack production bundle for this package. ai
source-diff obfuscated-file:dist/bundles/modern/592.bundle-ea31c8104dd88fb6cb47.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/modern/797.bundle-8440da362beef78fba2d.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/797.bundle-5a373d1da0de90e0b197.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/modern/166.bundle-adc56b9afb6063a8f6f2.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/166.bundle-4e63e22cb1669ea7190c.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/444.bundle-39a5ccbf0392090df720.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/modern/444.bundle-5f6285e95dcb86d128bb.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/modern/496.bundle-1edcc3cd1665316eb96d.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/496.bundle-489f2450699bf75a4edf.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/legacy/592.bundle-76b773f2e0cf7c88920b.js AI (source-diff): Standard webpack production bundle; SLSA-attested CI build from VEuPathDB monorepo. ai
source-diff obfuscated-file:dist/bundles/modern/166.bundle-f0a6aab6a35bd3dde9b0.js AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. ai
source-diff obfuscated-file:dist/bundles/modern/592.bundle-4f517794dfe3d2069387.js AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. ai
source-diff obfuscated-file:dist/bundles/legacy/592.bundle-3e51a6a6b66d0ef75b7c.js AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. ai
source-diff obfuscated-file:dist/bundles/legacy/443.bundle-f36d91a0a97267a543ab.js AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. ai
source-diff obfuscated-file:dist/bundles/modern/443.bundle-b354729a761d8c41647b.js AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. ai
source-diff obfuscated-file:dist/bundles/legacy/194.bundle-c22a2c194bca02012e2f.js AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. ai
source-diff obfuscated-file:dist/bundles/modern/194.bundle-6fe94ca9fa86a9157c16.js AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline. ai
source-diff obfuscated-file:dist/bundles/legacy/166.bundle-5f3e7f6ed3eebc374800.js AI (source-diff): Standard webpack production bundle; consistent with this package's build pipeline across all versions. ai
source-diff obfuscated-file:dist/bundles/modern/496.bundle-ffcc6275240968d0092f.js AI (source-diff): Standard webpack production bundle; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/modern/444.bundle-4f842285e027c5732a7f.js AI (source-diff): Standard webpack production bundle; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/444.bundle-135064cf0b0d122903e8.js AI (source-diff): Standard webpack production bundle; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/166.bundle-ada681b6696cbc3a9e44.js AI (source-diff): Standard webpack production bundle; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/modern/166.bundle-21c0ccec7c875fb1d95a.js AI (source-diff): Standard webpack production bundle; readable React code visible in sample. Normal for this package. ai
source-diff obfuscated-file:dist/bundles/legacy/951.bundle-e23e3956fd08c257684f.js AI (source-diff): Standard webpack production bundle from established VEuPathDB org package. ai
source-diff obfuscated-file:dist/bundles/modern/951.bundle-59a6a0be63158492dc69.js AI (source-diff): Standard webpack production bundle from established VEuPathDB org package. ai
source-diff obfuscated-file:dist/bundles/legacy/797.bundle-db39a2ae0ce76887dd07.js AI (source-diff): Standard webpack production bundle from established VEuPathDB org package. ai
source-diff obfuscated-file:dist/bundles/modern/797.bundle-baf13f173aec3b4114fb.js AI (source-diff): Standard webpack production bundle from established VEuPathDB org package. ai
source-diff obfuscated-file:dist/bundles/modern/592.bundle-e3583c01d9268d540de5.js AI (source-diff): Standard webpack production bundle; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/592.bundle-30ea67d2df522c9b77e3.js AI (source-diff): Standard webpack production bundle; readable React code visible in sample. ai
source-diff obfuscated-file:dist/bundles/legacy/496.bundle-715262b553fff6fba104.js AI (source-diff): Standard webpack production bundle; readable React code visible in sample. ai
phantom-deps phantom-dep:@veupathdb/preferred-organisms AI (phantom-deps): workspace:^ sibling in the VEuPathDB monorepo; phantom-dep heuristic doesn't apply to monorepo workspace deps. ai
provenance slsa-provenance AI (provenance): SLSA provenance attestation present; stable CI/CD publishing pattern for this package. ai

Versions (showing 12 of 12)

Version Deps Published
1.4.9 0 / 59
1.4.8 0 / 59
1.4.7 0 / 59
1.4.6 0 / 59
1.4.5 2 / 57
1.4.4 1 / 57
1.4.3 1 / 57
1.4.2 1 / 57
1.4.1 1 / 57
1.3.49 1 / 57
1.3.48 1 / 57
1.3.46 0 / 57

v1.4.9

7 findings
HIGH New obfuscated file: dist/bundles/modern/166.bundle-552bff53b18ce65b44ff.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/166.bundle-a8450b2a0dabea4ccadd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/733.bundle-a139a84abdf3f534c928.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/733.bundle-bd168a755d4d43120a61.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/797.bundle-29d683ad93423731dc5d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/797.bundle-8014ce4aacf09c1f019b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.8

9 findings
HIGH New obfuscated file: dist/bundles/modern/166.bundle-552bff53b18ce65b44ff.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/166.bundle-a8450b2a0dabea4ccadd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/496.bundle-a428cdfe1084159b3a82.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/496.bundle-c8f34abb64741d491bbb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/797.bundle-a77e60f8328e4e3bd8d2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/797.bundle-d734b0d96ccd1e1f86dc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/951.bundle-2b6f2a492ee2e3786b36.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/951.bundle-d2bbe9a50894345ac3e1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.7

11 findings
HIGH New obfuscated file: dist/bundles/modern/166.bundle-1c1bf21f667562cf5799.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/166.bundle-3e5a0294ac560031f530.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/496.bundle-6a7ed71305d6ec81703f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/496.bundle-8e534b66df89d8d63d6b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/592.bundle-352a569a2d38a946f374.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/592.bundle-c8c45906e164fa03ff45.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/797.bundle-a77e60f8328e4e3bd8d2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/797.bundle-d734b0d96ccd1e1f86dc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/951.bundle-2b6f2a492ee2e3786b36.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/951.bundle-d2bbe9a50894345ac3e1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.6

11 findings
HIGH New obfuscated file: dist/bundles/modern/166.bundle-1c1bf21f667562cf5799.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/166.bundle-3e5a0294ac560031f530.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/444.bundle-3b7cf2c4ce9161610a3c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/444.bundle-de27d6f41b1427ff0e9e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/496.bundle-11f2940303150da9f377.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/496.bundle-d7e37d58211348ca884c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/592.bundle-352a569a2d38a946f374.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/592.bundle-c8c45906e164fa03ff45.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/797.bundle-27b9fe39fa7f03eb1355.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/797.bundle-9c433ce562506ad98eeb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.5

11 findings
HIGH New obfuscated file: dist/bundles/modern/166.bundle-31fc83632db28de9c138.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/166.bundle-89d6d35f97b72c2041d7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/444.bundle-3b7cf2c4ce9161610a3c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/444.bundle-de27d6f41b1427ff0e9e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/496.bundle-531dd6f5e2faaf79baff.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/496.bundle-f375d0e1656ea4e80da8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/592.bundle-dffff091210a80232abc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/592.bundle-fb91717ec12d4efdbe50.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/797.bundle-27b9fe39fa7f03eb1355.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/797.bundle-9c433ce562506ad98eeb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.4

5 findings
HIGH New obfuscated file: dist/bundles/modern/496.bundle-09e0997b399557c26cbd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/496.bundle-a4b3b71992aa5821da5d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/797.bundle-27b9fe39fa7f03eb1355.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/797.bundle-9c433ce562506ad98eeb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.2

13 findings
HIGH New obfuscated file: dist/bundles/legacy/166.bundle-4e63e22cb1669ea7190c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/166.bundle-adc56b9afb6063a8f6f2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/444.bundle-39a5ccbf0392090df720.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/444.bundle-5f6285e95dcb86d128bb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/496.bundle-1edcc3cd1665316eb96d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/496.bundle-489f2450699bf75a4edf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/592.bundle-76b773f2e0cf7c88920b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/592.bundle-ea31c8104dd88fb6cb47.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/797.bundle-5a373d1da0de90e0b197.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/797.bundle-8440da362beef78fba2d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/951.bundle-59a6a0be63158492dc69.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/951.bundle-e23e3956fd08c257684f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.1

13 findings
HIGH New obfuscated file: dist/bundles/modern/166.bundle-21c0ccec7c875fb1d95a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/166.bundle-ada681b6696cbc3a9e44.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/444.bundle-135064cf0b0d122903e8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/444.bundle-4f842285e027c5732a7f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/496.bundle-715262b553fff6fba104.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/496.bundle-ffcc6275240968d0092f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/592.bundle-30ea67d2df522c9b77e3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/592.bundle-e3583c01d9268d540de5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/797.bundle-baf13f173aec3b4114fb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/797.bundle-db39a2ae0ce76887dd07.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/951.bundle-59a6a0be63158492dc69.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/951.bundle-e23e3956fd08c257684f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.3.49

9 findings
HIGH New obfuscated file: dist/bundles/legacy/166.bundle-5f3e7f6ed3eebc374800.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/166.bundle-f0a6aab6a35bd3dde9b0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/194.bundle-6fe94ca9fa86a9157c16.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/194.bundle-c22a2c194bca02012e2f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/443.bundle-b354729a761d8c41647b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/443.bundle-f36d91a0a97267a543ab.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/legacy/592.bundle-3e51a6a6b66d0ef75b7c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/bundles/modern/592.bundle-4f517794dfe3d2069387.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.3.48

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.