@cloud-ru/uikit-product-claudia
- в пакете только компоненты для ai ассистента - контрибьют в пакет идет мимо процесса PDS
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@snack-uikit/fields | AI (dependencies): @snack-uikit/* deps are consistently used across this package family; not a novel or suspicious addition. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New deps are from the same @snack-uikit ecosystem already used by this package; consistent with normal version evolution. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Growing UI component library; large file additions are consistent with feature expansion across versions. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size growth matches addition of new UI components; publisher has strong track record with 195 approved packages. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Component library README linking to design system docs is expected; not a phishing link farm. | ai |
Versions (showing 30 of 30)
| Version | Deps | Published |
|---|---|---|
| 1.19.18 | 21 / 0 | |
| 1.19.17 | 21 / 0 | |
| 1.19.16 | 21 / 0 | |
| 1.19.15 | 21 / 0 | |
| 1.19.14 | 21 / 0 | |
| 1.19.13 | 21 / 0 | |
| 1.19.12 | 21 / 0 | |
| 1.19.11 | 21 / 0 | |
| 1.19.10 | 21 / 0 | |
| 1.19.9 | 21 / 0 | |
| 1.19.8 | 21 / 0 | |
| 1.19.7 | 21 / 0 | |
| 1.19.6 | 21 / 0 | |
| 1.19.5 | 21 / 0 | |
| 1.19.4 | 21 / 0 | |
| 1.19.3 | 21 / 0 | |
| 1.18.3 | 21 / 0 | |
| 1.16.0 | 21 / 0 | |
| 1.11.0 | 20 / 0 | |
| 1.9.0 | 20 / 0 | |
| 1.8.4 | 17 / 0 | |
| 1.8.3 | 17 / 0 | |
| 1.8.2 | 17 / 0 | |
| 1.8.1 | 17 / 0 | |
| 1.8.0 | 17 / 0 | |
| 1.7.0 | 17 / 0 | |
| 1.6.5 | 16 / 0 | |
| 1.6.4 | 16 / 0 | |
| 1.6.3 | 16 / 0 | |
| 1.6.2 | 16 / 0 |
v1.19.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.19.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.19.16
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.19.15
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.19.14
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.19.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.