← Home

@blocklet/discuss-kit

npm

A react component for Discuss Kit blocklet.

51
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

wangshijungxw

Keywords

did

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:axios AI (phantom-deps): Config-file reference in bundled component lib; stable false positive for this package. ai
phantom-deps phantom-dep:lodash AI (phantom-deps): Config-file reference in bundled component lib; stable false positive for this package. ai
phantom-deps phantom-dep:js-cookie AI (phantom-deps): Config-file reference in bundled component lib; stable false positive for this package. ai
phantom-deps phantom-dep:timeago.js AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:@arcblock/ws AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:@dnd-kit/core AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:@emotion/react AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:@emotion/styled AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:clsx AI (phantom-deps): Pre-built component lib; deps declared for consumers/config, not direct imports. Stable FP for this package. ai
phantom-deps phantom-dep:@blocklet/editor AI (phantom-deps): Same org scope; declared dep used in build/config context. ai
phantom-deps phantom-dep:@blocklet/js-sdk AI (phantom-deps): Same org scope; declared dep used in build/config context. ai
phantom-deps phantom-dep:@dnd-kit/sortable AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:@dnd-kit/utilities AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:@uiw/react-md-editor AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:rehype-sanitize AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:@mui/lab AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai
phantom-deps phantom-dep:url-join AI (phantom-deps): Same pattern — declared for consumer/config use in a component library. ai

Versions (showing 51 of 243)

View all versions
Version Deps Published
2.6.25 24 / 11
2.6.22 24 / 11
2.6.18 24 / 11
2.6.11 24 / 11
2.6.6 24 / 11
2.5.88 24 / 11
2.5.68 24 / 11
2.5.61 24 / 11
2.5.47 24 / 11
2.5.28 24 / 11
2.5.27 24 / 11
2.5.25 24 / 11
2.5.12 24 / 11
2.5.6 24 / 11
2.5.2 24 / 11
2.5.1 24 / 11
2.5.0 24 / 11
2.4.126 24 / 11
2.4.125 24 / 11
2.4.124 24 / 11
2.4.123 24 / 11
2.4.122 24 / 11
2.4.121 24 / 11
2.4.120 24 / 11
2.4.119 24 / 11
2.4.118 24 / 11
2.4.117 24 / 11
2.4.116 24 / 11
2.4.115 24 / 11
2.4.114 24 / 11
2.4.112 24 / 11
2.4.111 24 / 11
2.4.110 24 / 11
2.4.109 24 / 11
2.4.108 24 / 11
2.4.107 24 / 11
2.4.106 24 / 11
2.4.105 24 / 11
2.4.104 24 / 11
2.4.103 24 / 11
2.4.102 24 / 11
2.4.101 24 / 11
2.4.100 24 / 11
2.4.99 24 / 11
2.4.98 24 / 11
2.4.97 24 / 11
2.4.96 24 / 11
2.4.95 24 / 11
2.4.94 24 / 11
2.4.93 24 / 11
2.4.92 24 / 11

v2.6.22

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.6.18

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.6.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.6.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.88

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.68

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.61

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.47

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.28

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.27

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.25

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.126

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.125

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.124

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.123

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.122

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.121

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.120

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.119

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.118

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.117

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.116

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.115

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.114

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.112

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.111

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.110

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.109

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.108

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.107

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.106

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.105

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.104

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.103

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.102

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.101

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.100

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.99

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.98

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.97

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.96

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.95

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.94

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.93

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v2.4.92

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.