← Home

@beda.software/web-item-controls

Reusable FHIR Questionnaire web itemControls and readonly itemControls for Beda-based React applications.

8
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

prozhkovbeda-softwareruscoderdmitryashutovdymio

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:fhir AI (dependencies): Well-known FHIR JS library, standard dependency for this domain. ai
npm-metadata url-dep:@beda.software/fhir-questionnaire AI (npm-metadata): First-party beda-software git dep pinned to a commit; stable across versions. ai
dependencies unvetted-dep:@beda.software/emr-config AI (dependencies): Own-org config dependency; consistent for this package. ai
phantom-deps phantom-dep:react-router-dom AI (phantom-deps): react-router-dom is a declared runtime dep; phantom-dep heuristic false positive for this package. ai
phantom-deps phantom-dep:@ant-design/colors AI (phantom-deps): Declared runtime dep used transitively; phantom-dep heuristic false positive for this package. ai

Versions (showing 8 of 8)

Version Deps Published
0.1.22 24 / 68
0.1.19 24 / 68
0.1.18 24 / 68
0.1.17 24 / 68
0.1.14 24 / 68
0.1.6 24 / 67
0.1.5 24 / 67
0.1.0 24 / 67

v0.1.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.