@adobe/react-spectrum-ui
Spectrum (S1) icons in React
6
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
dotenstopp-adobedylandepassdjaeggiadobehallsfullcolorcodermarbectripodgarthdblazdadobe-adminpatrickfultontrieloffshazronkrisnyedcpfsdknatebaldwindevongovettaspro83symanovidpfisterstefan-guggisbergkorrarofekptdobe
Keywords
reacticonSpectrum
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| email-domain | unclaimed-email:adobeio.com | AI (email-domain): adobeio.com was an Adobe internal domain; @adobe npm scope access controls prevent domain-based hijack of publish rights. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher change from jianliao79 to garthdb in 2022 reflects legitimate Adobe team transition; both are long-standing Adobe contributors. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainers are Adobe team members; corporate maintainer rotation is expected for @adobe-scoped packages. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Removed maintainers reflect normal Adobe team rotation; no signs of hostile takeover. | ai | |
| provenance | no-provenance | AI (provenance): Older Adobe package predates Sigstore provenance; no security concern for a scoped, established package. | ai | |
| license | uncommon-license:CC-BY-ND-4.0 | AI (license): CC-BY-ND-4.0 is Adobe's intentional license choice for icon assets; not a security signal. | ai |