← Home

@charcoal-ui/utils

主に内部向けに、汎用的な定数および関数(混色、CSS 向けのヘルパー)などを提供します。

21
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

pixiv-npmmimokmt

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from pixiv-npm to GitHub Actions CI is legitimate; SLSA attestation confirms official pipeline. ai
maintainer-change maintainer-removed AI (maintainer-change): Maintainer removal reflects automation via GitHub Actions; consistent with org-level CI publishing transition. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy followed by CI-automated publish under the same org repo; SLSA attestation confirms legitimate origin. ai

Versions (showing 21 of 21)

Version Deps Published
6.0.0 2 / 0
5.12.0 2 / 0
5.11.1 2 / 0
5.11.0 2 / 0
5.10.0 2 / 0
5.9.0 2 / 0
5.8.1 2 / 0
5.8.0 2 / 0
5.7.0 2 / 0
5.6.0 2 / 0
5.5.1 2 / 0
5.5.0 2 / 0
5.4.4 2 / 0
5.4.3 2 / 0
5.4.2 2 / 0
5.4.1 2 / 0
5.4.0 2 / 0
5.3.0 2 / 0
5.2.0 2 / 0
5.1.0 2 / 0
5.0.0 2 / 0

v6.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.