flubber

Best-guess methods for smoothly interpolating and animating between shapes.

Supply chain provenance

Status for the latest visible version.

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

Keywords

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	net-exec-file:demos/d3.v4.min.js	AI (source-diff): This is the canonical minified D3.js v4.9.1 library in a demos directory. Network and dynamic code patterns are inherent to D3's design; not malware.	ai	2026/04/22
dependencies	unvetted-dep:svgpath	AI (dependencies): svgpath is a reputable SVG path manipulation library; directly relevant to flubber's SVG shape morphing purpose.	ai	2026/04/21
dependencies	unvetted-dep:d3-array	AI (dependencies): d3-array is a core D3.js module by Mike Bostock; widely trusted in the data visualization ecosystem.	ai	2026/04/21
dependencies	unvetted-dep:d3-polygon	AI (dependencies): d3-polygon is a core D3.js module by Mike Bostock; directly relevant to polygon operations in shape morphing.	ai	2026/04/21
dependencies	unvetted-dep:earcut	AI (dependencies): earcut is a well-known polygon triangulation library by Mapbox; legitimate dependency for shape interpolation functionality.	ai	2026/04/21
dependencies	unvetted-dep:svg-path-properties	AI (dependencies): svg-path-properties is a legitimate SVG utility library; directly relevant to flubber's SVG path interpolation functionality.	ai	2026/04/21
provenance	no-provenance	AI (provenance): Package predates npm Sigstore provenance by years; absence is expected and not a security concern for this established package.	ai	2026/04/21
dependencies	unvetted-dep:topojson-client	AI (dependencies): topojson-client is a well-known geographic data library by Mike Bostock; legitimate dependency for shape handling.	ai	2026/04/21

Version	Deps	Published
0.4.2	6 / 9	2018-03-01
0.4.0	6 / 9	2017-08-10
0.3.1	6 / 9	2017-07-10
0.3.0	6 / 9	2017-06-21
0.2.6	6 / 9	2017-06-12
0.2.5	6 / 9	2017-06-12
0.2.4	6 / 9	2017-06-12
0.2.3	6 / 9	2017-06-12
0.2.2	6 / 9	2017-06-11
0.2.1	6 / 9	2017-06-10
0.2.0	6 / 9	2017-06-09
0.1.3	6 / 9	2017-06-09
0.1.2	6 / 9	2017-06-09
0.1.1	6 / 9	2017-06-09
0.1.0	6 / 9	2017-06-09