@authn-sh/ui
Design primitives for authn.sh — internal to the @authn-sh React/Vue SDKs.
9
Versions
AGPL-3.0-only
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
vagnercsouza
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| license | copyleft-license:AGPL-3.0-only | AI (license): AGPL-3.0 is intentional and disclosed; appropriate for internal design-system package. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-avatar | AI (dependencies): Radix UI primitive; consistent with all other @radix-ui deps in this package, stable false positive. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-popover | AI (phantom-deps): Declared as runtime dep; may be used indirectly or in config; stable false positive for this UI library. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped org package with SLSA provenance; not targeting qs. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped org package with SLSA provenance; not targeting joi. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped org package with SLSA provenance; not targeting yup. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped org package with SLSA provenance; not targeting pg. | ai | |
| typosquat | typosquat.levenshtein:uuid | AI (typosquat): Scoped org package with SLSA provenance; not targeting uuid. | ai |