← Home

@assistant-ui/react-ui

2
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

yonomagentbase-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@radix-ui/react-avatar AI (dependencies): @radix-ui/react-avatar is a well-established Radix UI primitive; stable false positive for this package. ai
bogus-package bogus-package AI (bogus-package): UI component library; sparse README/no keywords is cosmetic, not a spam indicator for this package. ai

Versions (showing 2 of 2)

Version Deps Published
0.2.1 8 / 13
0.2.0 8 / 13

v0.2.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.