@blocknote/react
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/confirmDiscardUnsavedComment-Cc3ZENyf.cjs | AI (source-diff): Minified bundler output with readable requires; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/defaultCommentEditorSchema-Cow33c_f.cjs | AI (source-diff): Standard Vite CJS bundle output; minified but readable React component code. | ai | |
| source-diff | obfuscated-file:dist/FloatingThreadController-BDiAihkl.cjs | AI (source-diff): Standard Vite CJS bundle output; minified but readable React component code. | ai | |
| source-diff | obfuscated-file:dist/defaultCommentEditorSchema-5lMwQ_SX.cjs | AI (source-diff): Standard Vite CJS bundle output; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/FloatingThreadController-pjc8XgLI.cjs | AI (source-diff): Standard Vite CJS bundle output; minified but not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/FloatingThreadController-CIHycitO.cjs | AI (source-diff): Standard Vite/Rollup CJS bundle output with readable code; stable for this package. | ai | |
| phantom-deps | phantom-dep:@floating-ui/utils | AI (phantom-deps): Declared dependency used by floating-ui internals; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@types/use-sync-external-store | AI (phantom-deps): Type-only package loaded by convention; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:lodash.merge | AI (phantom-deps): Listed as dependency and used transitively; phantom-dep heuristic false positive for this package. | ai |
Versions (showing 27 of 27)
| Version | Deps | Published |
|---|---|---|
| 0.52.1 | 10 / 13 | |
| 0.52.0 | 10 / 13 | |
| 0.51.4 | 14 / 16 | |
| 0.51.3 | 14 / 16 | |
| 0.51.2 | 14 / 16 | |
| 0.51.1 | 14 / 16 | |
| 0.51.0 | 14 / 16 | |
| 0.50.0 | 14 / 16 | |
| 0.49.0 | 14 / 16 | |
| 0.48.1 | 14 / 17 | |
| 0.48.0 | 14 / 17 | |
| 0.47.3 | 14 / 17 | |
| 0.47.2 | 14 / 17 | |
| 0.47.1 | 14 / 17 | |
| 0.47.0 | 14 / 17 | |
| 0.46.2 | 14 / 17 | |
| 0.46.1 | 14 / 17 | |
| 0.46.0 | 14 / 17 | |
| 0.45.0 | 14 / 17 | |
| 0.44.2 | 14 / 17 | |
| 0.44.1 | 14 / 17 | |
| 0.44.0 | 14 / 17 | |
| 0.43.0 | 14 / 17 | |
| 0.42.3 | 9 / 17 | |
| 0.42.2 | 9 / 17 | |
| 0.42.1 | 9 / 17 | |
| 0.42.0 | 9 / 17 |
v0.52.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.52.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.47.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.47.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.47.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.47.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.46.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.46.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.46.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.45.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.44.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.44.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.44.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.43.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.42.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.42.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.42.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.42.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.