← Home

@carbon-labs/wc-date-picker

npm Repository Homepage

Carbon Labs - date-picker component

13
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

carbon-design-systemtay1orjonescarbon-botibmdesignjeffreychew

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:es/components/date-picker/date-picker.scss.js AI (source-diff): Minified CSS-in-JS build artifact (lit css template); standard output for Carbon web components packages. ai
source-diff obfuscated-file:lib/components/date-picker/date-picker.scss.js AI (source-diff): CJS equivalent of the same minified CSS-in-JS artifact; expected build output. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Framework-scoped transitive dep; stable false positive for Carbon component packages. ai
phantom-deps phantom-dep:@carbon-labs/utilities AI (phantom-deps): Same-org utility package; phantom-dep heuristic unreliable for monorepo siblings. ai
phantom-deps phantom-dep:uuid AI (phantom-deps): Declared runtime dep; config-file reference pattern is a known false positive. ai
phantom-deps phantom-dep:@js-temporal/polyfill AI (phantom-deps): Declared runtime dep for Temporal API polyfill; config-file reference is a known false positive. ai

Versions (showing 13 of 13)

Version Deps Published
0.15.0 6 / 0
0.13.0 6 / 0
0.12.0 6 / 0
0.11.0 6 / 0
0.10.0 6 / 0
0.9.0 6 / 0
0.8.0 6 / 0
0.7.0 6 / 0
0.6.0 6 / 0
0.5.0 6 / 0
0.4.0 6 / 0
0.3.0 5 / 0
0.2.0 5 / 0

v0.15.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.