@alpic-ai/ui
Alpic design system — shared UI components
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Package has 638 versions and 31.7k weekly downloads; 0.0.0 is an initial release of a scoped org package, not a throwaway malicious package. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped package @alpic-ai/ui is not a typosquat of 'pg'; levenshtein distance on scoped names vs short packages is a known false positive pattern. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped package @alpic-ai/ui is not a typosquat of 'qs'; levenshtein distance on scoped names vs short packages is a known false positive pattern. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped package @alpic-ai/ui is not a typosquat of 'joi'; levenshtein distance on scoped names vs short packages is a known false positive pattern. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped package @alpic-ai/ui is not a typosquat of 'yup'; levenshtein distance on scoped names vs short packages is a known false positive pattern. | ai | |
| typosquat | typosquat.levenshtein:uuid | AI (typosquat): Scoped package @alpic-ai/ui is not a typosquat of 'uuid'; levenshtein distance on scoped names vs short packages is a known false positive pattern. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-dialog | AI (dependencies): @radix-ui/react-dialog is a well-known, widely-used Radix UI primitive; legitimate dependency for a UI component library. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-select | AI (dependencies): @radix-ui/react-select is a well-known, widely-used Radix UI primitive; legitimate dependency for a UI component library. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-tooltip | AI (dependencies): @radix-ui/react-tooltip is a well-known, widely-used Radix UI primitive; legitimate dependency for a UI component library. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-dropdown-menu | AI (dependencies): @radix-ui/react-dropdown-menu is a well-known, widely-used Radix UI primitive; legitimate dependency for a UI component library. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-avatar | AI (dependencies): @radix-ui/react-avatar is a well-known, widely-used Radix UI primitive; legitimate dependency for a UI component library. | ai |
Versions (showing 76 of 76)
| Version | Deps | Published |
|---|---|---|
| 1.159.0 | 22 / 12 | |
| 1.158.0 | 22 / 12 | |
| 1.157.3 | 22 / 12 | |
| 1.157.2 | 22 / 12 | |
| 1.157.1 | 22 / 12 | |
| 1.157.0 | 22 / 12 | |
| 1.156.0 | 22 / 12 | |
| 1.155.0 | 22 / 12 | |
| 1.154.1 | 22 / 12 | |
| 1.154.0 | 22 / 12 | |
| 1.153.0 | 22 / 12 | |
| 1.152.0 | 22 / 12 | |
| 1.151.0 | 22 / 12 | |
| 1.150.0 | 22 / 12 | |
| 1.149.0 | 22 / 12 | |
| 1.148.1 | 22 / 12 | |
| 1.148.0 | 22 / 12 | |
| 1.147.1 | 22 / 12 | |
| 1.147.0 | 22 / 12 | |
| 1.146.1 | 22 / 12 | |
| 1.146.0 | 22 / 12 | |
| 1.145.2 | 22 / 12 | |
| 1.145.1 | 22 / 12 | |
| 1.145.0 | 22 / 12 | |
| 1.144.0 | 22 / 12 | |
| 1.143.0 | 22 / 12 | |
| 1.142.3 | 22 / 12 | |
| 1.142.2 | 22 / 12 | |
| 1.142.1 | 22 / 12 | |
| 1.142.0 | 22 / 12 | |
| 1.141.0 | 22 / 12 | |
| 1.140.0 | 21 / 12 | |
| 1.139.0 | 21 / 12 | |
| 1.138.0 | 21 / 12 | |
| 1.137.0 | 21 / 12 | |
| 1.136.4 | 21 / 12 | |
| 1.136.3 | 21 / 12 | |
| 1.136.2 | 21 / 12 | |
| 1.136.1 | 21 / 12 | |
| 1.136.0 | 21 / 12 | |
| 1.135.1 | 21 / 12 | |
| 1.134.0 | 21 / 12 | |
| 1.133.0 | 21 / 12 | |
| 1.132.0 | 21 / 12 | |
| 1.131.1 | 21 / 12 | |
| 1.131.0 | 21 / 12 | |
| 1.130.2 | 21 / 12 | |
| 1.130.1 | 21 / 12 | |
| 1.130.0 | 21 / 12 | |
| 1.129.7 | 21 / 12 | |
| 1.129.6 | 21 / 12 | |
| 1.129.5 | 21 / 12 | |
| 1.129.4 | 21 / 12 | |
| 1.129.3 | 21 / 12 | |
| 1.129.2 | 21 / 12 | |
| 1.129.1 | 21 / 12 | |
| 1.129.0 | 21 / 12 | |
| 1.128.0 | 21 / 12 | |
| 1.127.1 | 21 / 12 | |
| 1.127.0 | 21 / 12 | |
| 1.126.0 | 21 / 12 | |
| 1.125.0 | 21 / 12 | |
| 1.124.1 | 21 / 12 | |
| 1.124.0 | 21 / 12 | |
| 1.123.0 | 21 / 12 | |
| 1.122.1 | 21 / 12 | |
| 1.122.0 | 21 / 12 | |
| 1.121.0 | 21 / 12 | |
| 1.120.1 | 21 / 12 | |
| 1.120.0 | 21 / 12 | |
| 1.119.0 | 21 / 12 | |
| 1.118.0 | 21 / 12 | |
| 1.117.0 | 21 / 12 | |
| 1.116.0 | 21 / 12 | |
| 1.112.0 | 21 / 12 | |
| 0.0.0 | 21 / 11 |
v1.159.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.158.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.157.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.157.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.157.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.157.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.156.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.155.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.154.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.154.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.153.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.152.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.151.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.150.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.149.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.148.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.148.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.147.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.147.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.146.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.146.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.145.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.145.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.145.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.