.cache-loader

047e07960a46cc5bb7da4c841b1b85b7.json

055ff0d7d2756fa8f1a00e19608f17ed.json

0cfc529bec30668897b207256626fa3a.json

0d00ba8c4f19c3c7e044504036a2ca0b.json

0eb2baea91e7375c9b6c1e1e2c8c0191.json

10008fde9882bd8cc57a62a56d260ce3.json

1141a573bebe2e7d987907c1ecc2609e.json

19900ea2fb5af31866204fd538bc0e06.json

201419e4779c4bba18a15bc352939e49.json

2561917e62c1304e1e88ffef81e6a1b5.json

2e1fac43055bd399bf685297ebc21b8b.json

2fd58b109d4fb185a9191f7f1f4c0cc1.json

307937129369a84830fc6290d03e22e1.json

31532ca5d1b2cb7f4018c1fc2a1b8594.json

32c55e51d5a6047056d9574441dd8b70.json

32cc05f4552ea558184ac0b3eb99287e.json

387e3825e7383493014104e904213f9e.json

3ac673df82166e403e4d899408441e12.json

40a2aeeaa1e70b4e85c7ea08ad9601db.json

40d2a005b672b4ed93bed499d38008f2.json

4ae8c6945bfe48ac0cfa2a5f23d2a696.json

4b121891fa502a6238576d7178a77978.json

52f03eb2132d7abb135844f6d2546328.json

58b1004bf5f83d51b09f6ee1308c5a61.json

596443ac578c553371c2105b2212756d.json

596f20a8173bb8a0af3c8c1588b55d27.json

5e86088664c242456ebf290a1a2e5fe6.json

603c50d676c6fff1f65e2a38c8d437ab.json

67531ad6e8ae963479f67c52aadc2d1a.json

6d38c5bd4288164c57ecc1d7aaf18ecd.json

71eea849c6bb54932cab58e4f54c88ca.json

738402f922a571fef989209df5681303.json

73b1b76ed61e9d95f6abfff66ce2b4df.json

74ebd60a6ff6e3313bc1a1972accc39d.json

77509e6605f1e8b491808a9dec485a1c.json

78bf803caf4c222e63d3a631ee0c57f1.json

7b794322c8d3be36d73bbb1477efd931.json

805f5f39a2bb4c3a578981e228c6dbbe.json

83c6709efd9eb0b16f5ae158a6acedcc.json

865ba857634d60d60be45415bd8c9296.json

89aa506da43d8c3cda28b32212bc92dd.json

8dd92afdcadf26f143b69b8c8c54d3fb.json

8dfdc0714e172d6989db23789afc4ed6.json

8e953bede43bcd233e31421dec31d330.json

8f29db746e2dcc88073484e0bafcdad3.json

91b290ac76f473176e3bddde982dc8b0.json

9468533daa84fd2d81ccf1768e701fe7.json

9719f0e28674ac83dc3fa39e4023dbb1.json

98547a20460886ea769bb6a939c66fc8.json

98f86acbb1f00d7154c16e30cb8cb72d.json

9cdb005607e0565c4a2a119fda0c0367.json

a1b5a5c0c24eb28a1a4fce79931c37aa.json

a4cc2998b54372e11125af206d0d93b2.json

a8878e48dd3ecd59654897a3432e0dc6.json

a90b3b8bb579e2abb88f119f06811304.json

ab161f4960f0e62e8b0ccd3f6debd7c5.json

acc4be4c1a4d31c84246c4151b4ca315.json

ad84c1e9c12a0851e260f854b6d36496.json

ae44c91b0537b2fd8f0e1ae15938ce52.json

aff78421fc6f55c2192c499982ce4b32.json

b127956f0609878037b52db75a39636c.json

b6ae9fb6208d0de4996aa6052d86581f.json

b6dd632ceca34e52e7f5df0c35d9b1c0.json

b84b4401c96434a5f979894873dd9234.json

bb118f630d20c23ad829ed00a6f371af.json

bea2ab572dc4e78ab168c151e9ac2066.json

bedc38d456662e042792055fcfe96f0b.json

bf03fbba1980e90de977a105d2472ef6.json

c4bb3f39a6e96caac8b556f2493adbd6.json

cf8aea1a40448cb4aa55f92322ed9d93.json

d00fea2c971c6182415bc545eaa82203.json

d4173ac9f9f440af57d89801b2b541f9.json

d6ce31932c01350556be06d1d2b90b23.json

d77f2266d57535534fd2eb6d73a110ab.json

d89ca9fc7edb91d15f56c2257a52bb2d.json

e4eb5dd9af0a6635b694196be19bb476.json

e529e08531d2856ce08bb2601b6d6020.json

e6e797738abec062613cf7c440123883.json

e9983ccc4fa21028aaa8fadf01a94268.json

ed2866783d257beb8dfcd0211aeaefd2.json

efdc8d00f3035f7924db1eee71aa390e.json

f250629420e39ef6c6df6d2abc75674d.json

f38890f873ee43fcf7493a9b51b311ba.json

f65b483e5bb8b6cbfd0272ea3e6e4894.json

f757417bdc344a2447baf8055059662d.json

fc3025aba0dcca2ebf1c6952d942e89d.json

fde3b760699fff365ebcf0a7b18ca376.json

appengine.icon.d44e5.svg

appengine.logo.3fde0.svg

appengine.module.d.ts

appengine.module.js

appengine.module.js.map

appengine.settings.d.ts

appengine.settings.js

appengine.settings.js.map

cache

cacheConfigurer.service.d.ts

cacheConfigurer.service.js

Announcing our $40M Series B led by Abstract Ventures

@spinnaker/appengine

christopherthielen

ajordens

dpeach

erikmunson

spinnakerteam

anotherchrisberry

archana-s

duftler

jrsquared

tomaslin

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

@spinnaker/appengine - npm Package File explorer