@carbon/type Apache-2.0 65 versions

@carbon/type

npm Repository Homepage

Typography for digital and software products using the Carbon Design System

65

Versions

Apache-2.0

License

Yes

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

carbon-design-systemcarbon-botalisonjosephleechasejeffreychewsstrubbergtay1orjones

Keywords

eyeglass-moduleibmelementscarboncarbon-elementscarbon-design-systemcomponentsreact

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
publish-pattern	new-deps-added	AI (publish-pattern): Official IBM telemetry dep added org-wide across Carbon packages; not malicious.	ai	2026/07/24
publish-pattern	dormant-publish	AI (publish-pattern): Carbon monorepo publishes via GitHub Actions CI; apparent dormancy reflects publisher account change, not takeover.	ai	2026/05/03
maintainer-change	maintainer-removed	AI (maintainer-change): Carbon Design System migrated to GitHub Actions CI publishing; individual maintainer removal is expected org practice.	ai	2026/05/03
install-scripts	install-script:postinstall	AI (install-scripts): IBM telemetry collector is standard across all Carbon Design System packages; not malicious.	ai	2026/04/29
phantom-deps	phantom-dep:@carbon/grid	AI (phantom-deps): Sibling Carbon org package; phantom-dep is a stable false positive for this monorepo package.	ai	2026/04/29
phantom-deps	phantom-dep:@ibm/telemetry-js	AI (phantom-deps): Used via CLI invocation in postinstall, not direct import; stable false positive.	ai	2026/04/29

Versions (showing 65 of 65)

Version	Deps	Published
11.63.0	3 / 7	2026-07-15
11.60.0	3 / 5	2026-05-20
11.59.0	3 / 5	2026-05-06
11.58.0	3 / 5	2026-04-22
11.57.0	3 / 5	2026-04-08
11.56.0	3 / 5	2026-03-25
11.55.0	3 / 5	2026-02-25
11.52.0	3 / 5	2026-01-13
11.51.0	3 / 5	2025-12-17
11.50.0	3 / 5	2025-12-03
11.48.0	3 / 5	2025-09-24
11.47.0	3 / 5	2025-09-10
11.46.0	3 / 5	2025-08-27
11.45.0	3 / 5	2025-08-13
11.44.0	3 / 5	2025-07-30
11.43.0	3 / 5	2025-07-16
11.42.0	3 / 5	2025-06-18
11.41.0	3 / 5	2025-06-04
11.40.0	3 / 5	2025-05-07
11.39.0	3 / 5	2025-04-23
11.38.0	3 / 5	2025-04-09
11.37.0	3 / 5	2025-03-26
11.36.2	3 / 5	2025-03-17
11.36.1	3 / 5	2025-03-17
11.36.0	3 / 5	2025-02-26
11.35.0	3 / 5	2025-01-30
11.33.0	3 / 5	2024-10-24
11.32.1	3 / 5	2024-10-02
11.32.0	3 / 5	2024-09-26
11.31.0	3 / 5	2024-09-12
11.30.0	3 / 5	2024-08-28
11.29.0	3 / 5	2024-07-31
11.28.1	3 / 5	2024-06-19
11.28.0	3 / 5	2024-06-19
11.27.0	3 / 5	2024-05-09
11.26.0	3 / 5	2024-03-13
11.25.1	2 / 5	2023-10-27
11.25.0	2 / 5	2023-10-26
11.24.0	2 / 5	2023-09-15
11.23.0	2 / 5	2023-08-17
11.22.0	2 / 5	2023-08-03
11.21.1	2 / 5	2023-07-27
11.21.0	2 / 5	2023-07-21
11.20.1	2 / 5	2023-07-07
11.20.0	2 / 5	2023-07-06
11.19.0	2 / 5	2023-06-08
11.18.0	2 / 5	2023-05-25
11.17.0	2 / 5	2023-04-13
11.16.0	2 / 5	2023-03-03
11.15.0	2 / 5	2023-01-19
11.14.0	2 / 5	2023-01-05
11.13.0	2 / 5	2022-12-08
11.12.0	2 / 5	2022-12-02
11.11.0	2 / 5	2022-10-27
11.10.0	2 / 5	2022-09-29
11.9.0	1 / 5	2022-09-15
11.8.0	1 / 5	2022-09-01
11.7.0	1 / 5	2022-08-18
11.6.0	1 / 5	2022-08-04
11.5.0	1 / 5	2022-07-21
11.4.0	1 / 5	2022-06-09
11.3.0	1 / 5	2022-05-12
11.2.0	1 / 5	2022-04-28
11.1.0	1 / 5	2022-04-14
11.0.0	1 / 5	2022-03-31

v11.63.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v11.56.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v11.51.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v11.39.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.38.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.37.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.36.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.36.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.36.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.35.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.33.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.32.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.32.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.31.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.30.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.29.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.28.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.28.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.27.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.26.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.25.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.25.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.24.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.23.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.22.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v11.21.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.21.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.20.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.20.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.19.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.18.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.17.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.16.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.15.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.14.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.13.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.12.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.11.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.10.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.9.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.8.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.7.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.6.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.5.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.4.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.3.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.1.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.