@atlaskit/forge-react-types
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@atlassian/react-compiler-gating | AI (phantom-deps): Config-only reference for react-compiler gating; not directly imported in source code, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/types/components/__generated__/tokens.codegen.d.ts | AI (source-diff): Same codegen pattern as above; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/types-ts4.5/components/__generated__/tokens.codegen.d.ts | AI (source-diff): Codegen-produced TypeScript declaration file; long lines are large token-map object types, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/types/components/__generated__/BreadcrumbsItemProps.codegen.d.ts | AI (source-diff): Codegen-produced .d.ts with long icon union types; not obfuscated, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/types-ts4.5/components/__generated__/BannerProps.codegen.d.ts | AI (source-diff): Codegen-produced .d.ts with long icon union types; not obfuscated, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/types/components/__generated__/BannerProps.codegen.d.ts | AI (source-diff): Codegen-produced .d.ts with long icon union types; not obfuscated, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/types-ts4.5/components/__generated__/BreadcrumbsItemProps.codegen.d.ts | AI (source-diff): Codegen-produced .d.ts with long icon union types; not obfuscated, stable pattern for this package. | ai | |
| dependencies | unvetted-dep:@atlaskit/tag-group | AI (dependencies): First-party @atlaskit component from same Atlassian publisher; stable false positive. | ai | |
| dependencies | unvetted-dep:@atlaskit/breadcrumbs | AI (dependencies): First-party @atlaskit component from same Atlassian publisher; stable false positive. | ai | |
| dependencies | unvetted-dep:@atlaskit/progress-tracker | AI (dependencies): First-party @atlaskit component from same Atlassian publisher; stable false positive. | ai | |
| dependencies | unvetted-dep:@atlaskit/navigation-system | AI (dependencies): First-party @atlaskit component from same Atlassian publisher; stable false positive. | ai | |
| dependencies | unvetted-dep:@atlaskit/comment | AI (dependencies): First-party @atlaskit component from same Atlassian publisher; stable false positive. | ai | |
| dependencies | unvetted-dep:@atlaskit/banner | AI (dependencies): First-party @atlaskit component from same Atlassian publisher; stable false positive. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process used only in dev codegen/typecheck scripts, not in runtime or install hooks. | ai |
Versions (showing 51 of 68)
| Version | Deps | Published |
|---|---|---|
| 2.3.2 | 34 / 8 | |
| 2.3.1 | 34 / 8 | |
| 2.3.0 | 34 / 8 | |
| 2.2.1 | 35 / 8 | |
| 2.2.0 | 35 / 8 | |
| 2.1.2 | 35 / 8 | |
| 2.1.1 | 35 / 8 | |
| 2.1.0 | 35 / 8 | |
| 2.0.1 | 35 / 8 | |
| 2.0.0 | 34 / 9 | |
| 1.7.1 | 34 / 9 | |
| 1.7.0 | 34 / 9 | |
| 1.6.2 | 34 / 9 | |
| 1.6.1 | 34 / 9 | |
| 1.6.0 | 34 / 9 | |
| 1.5.0 | 34 / 9 | |
| 1.4.0 | 34 / 9 | |
| 1.3.2 | 34 / 9 | |
| 1.3.1 | 34 / 9 | |
| 1.3.0 | 34 / 9 | |
| 1.2.0 | 34 / 9 | |
| 1.1.0 | 34 / 9 | |
| 1.0.9 | 29 / 9 | |
| 1.0.8 | 29 / 9 | |
| 1.0.7 | 29 / 9 | |
| 1.0.6 | 29 / 9 | |
| 1.0.5 | 29 / 8 | |
| 1.0.4 | 29 / 7 | |
| 1.0.3 | 29 / 7 | |
| 1.0.2 | 29 / 7 | |
| 1.0.1 | 29 / 7 | |
| 1.0.0 | 29 / 7 | |
| 0.67.0 | 29 / 7 | |
| 0.66.0 | 29 / 7 | |
| 0.65.3 | 29 / 7 | |
| 0.65.2 | 29 / 7 | |
| 0.65.1 | 29 / 7 | |
| 0.65.0 | 29 / 7 | |
| 0.64.0 | 29 / 7 | |
| 0.63.2 | 29 / 7 | |
| 0.63.1 | 29 / 7 | |
| 0.63.0 | 29 / 7 | |
| 0.62.0 | 29 / 7 | |
| 0.61.0 | 29 / 7 | |
| 0.60.0 | 29 / 7 | |
| 0.59.0 | 29 / 7 | |
| 0.58.0 | 28 / 7 | |
| 0.57.1 | 28 / 7 | |
| 0.57.0 | 28 / 7 | |
| 0.56.2 | 28 / 7 | |
| 0.56.1 | 28 / 7 |
v2.3.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.3.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.3.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.2.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.2.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.