@assistant-ui/react-markdown No license 2 versions

@assistant-ui/react-markdown

npm Repository Homepage

Versions

—

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

yonomagentbase-bot

markdownreact-markdownassistant-uireactaichatrendering

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): Transition from manual (yonom) to GitHub Actions CI publishing; SLSA provenance attestation confirms legitimate CI/CD pipeline.	ai	2026/05/08
phantom-deps	phantom-dep:@types/hast	AI (phantom-deps): @types/hast is intentionally a runtime dep for hast type usage with react-markdown; stable pattern for this package.	ai	2026/05/04
bogus-package	bogus-package	AI (bogus-package): Thin README/no keywords are cosmetic; package is part of a well-established monorepo with SLSA provenance.	ai	2026/05/04

Version	Deps	Published
0.0.2	2 / 3	2024-07-02
0.0.1	2 / 3	2024-06-26

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.