← Home

@assistant-ui/react-markdown

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

yonomagentbase-bot

Keywords

markdownreact-markdownassistant-uireactaichatrendering

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from manual (yonom) to GitHub Actions CI publishing; SLSA provenance attestation confirms legitimate CI/CD pipeline. ai
phantom-deps phantom-dep:@types/hast AI (phantom-deps): @types/hast is intentionally a runtime dep for hast type usage with react-markdown; stable pattern for this package. ai
bogus-package bogus-package AI (bogus-package): Thin README/no keywords are cosmetic; package is part of a well-established monorepo with SLSA provenance. ai

Versions (showing 51 of 102)

View all versions
Version Deps Published
0.14.7 4 / 7
0.14.6 4 / 7
0.14.5 4 / 7
0.14.4 4 / 7
0.14.3 4 / 7
0.14.2 4 / 7
0.14.1 4 / 7
0.14.0 4 / 7
0.12.11 4 / 7
0.12.9 4 / 7
0.12.8 4 / 7
0.12.7 4 / 7
0.12.6 4 / 7
0.12.5 4 / 7
0.12.4 4 / 7
0.12.3 4 / 7
0.12.2 4 / 7
0.12.1 4 / 7
0.12.0 4 / 7
0.11.10 4 / 7
0.11.9 4 / 7
0.11.8 5 / 7
0.11.7 5 / 7
0.11.6 5 / 7
0.11.5 5 / 7
0.11.4 5 / 7
0.11.3 5 / 9
0.11.2 5 / 9
0.11.1 5 / 9
0.11.0 5 / 9
0.10.9 5 / 9
0.10.8 5 / 9
0.10.7 5 / 9
0.10.6 5 / 9
0.10.5 5 / 8
0.10.4 5 / 8
0.10.3 5 / 8
0.10.2 5 / 9
0.10.1 5 / 9
0.10.0 5 / 9
0.9.3 5 / 9
0.9.2 5 / 9
0.9.1 5 / 9
0.9.0 5 / 9
0.8.1 5 / 9
0.8.0 5 / 9
0.7.21 6 / 14
0.7.20 6 / 14
0.7.19 6 / 14
0.7.18 6 / 14
0.7.17 6 / 14

v0.14.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.14.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.