@assistant-ui/tap
Zero-dependency reactive state management inspired by React hooks
47
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
yonomagentbase-bot
Keywords
state-managementreactivehookssignalstap
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed from yonom to GitHub Actions as part of intentional CI/CD migration with SLSA provenance attestation enabled. This is a supply chain improvement, not a compromise signal, and generalizes to future versions. | ai | |
| typosquat | typosquat.levenshtein:hapi | AI (typosquat): Scoped package @assistant-ui/tap; 'tap' is a generic term with no relation to 'hapi'. Levenshtein match on short unscoped name is a stable false positive for this package. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped package @assistant-ui/tap; 'tap' is a generic term with no relation to 'yup'. Levenshtein match on short unscoped name is a stable false positive for this package. | ai |
Versions (showing 47 of 47)
| Version | Deps | Published |
|---|---|---|
| 0.9.5 | 0 / 11 | |
| 0.9.4 | 0 / 11 | |
| 0.9.3 | 0 / 11 | |
| 0.9.2 | 0 / 11 | |
| 0.9.1 | 0 / 11 | |
| 0.8.1 | 0 / 11 | |
| 0.7.1 | 0 / 11 | |
| 0.6.1 | 0 / 11 | |
| 0.6.0 | 0 / 11 | |
| 0.5.14 | 0 / 11 | |
| 0.5.13 | 0 / 11 | |
| 0.5.12 | 0 / 11 | |
| 0.5.11 | 0 / 11 | |
| 0.5.10 | 0 / 11 | |
| 0.5.9 | 0 / 11 | |
| 0.5.8 | 0 / 11 | |
| 0.5.7 | 0 / 11 | |
| 0.5.6 | 0 / 11 | |
| 0.5.5 | 0 / 11 | |
| 0.5.4 | 0 / 11 | |
| 0.5.3 | 0 / 11 | |
| 0.5.2 | 0 / 11 | |
| 0.5.1 | 0 / 11 | |
| 0.5.0 | 0 / 11 | |
| 0.4.6 | 0 / 11 | |
| 0.4.5 | 0 / 11 | |
| 0.4.4 | 0 / 11 | |
| 0.4.3 | 0 / 11 | |
| 0.4.2 | 0 / 11 | |
| 0.4.0 | 0 / 11 | |
| 0.3.6 | 0 / 4 | |
| 0.3.5 | 0 / 4 | |
| 0.3.4 | 0 / 7 | |
| 0.3.3 | 0 / 7 | |
| 0.3.2 | 0 / 7 | |
| 0.3.1 | 0 / 7 | |
| 0.3.0 | 0 / 7 | |
| 0.2.2 | 0 / 7 | |
| 0.2.1 | 0 / 7 | |
| 0.1.5 | 0 / 7 | |
| 0.1.4 | 0 / 7 | |
| 0.1.3 | 0 / 7 | |
| 0.1.2 | 0 / 7 | |
| 0.1.1 | 0 / 7 | |
| 0.1.0 | 0 / 7 | |
| 0.0.2 | 0 / 7 | |
| 0.0.1 | 0 / 7 |
v0.9.5
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.9.4
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.