@codecademy/brand
Brand component library for Codecademy
35
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
codecademy-eng
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/AppHeader/AppHeaderElements/AppHeaderLiveCoursesDropdown/index.js | AI (source-diff): Long lines are emotion CSS-in-JS compiled output with embedded source maps; standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/InstructorCard/index.js | AI (source-diff): Long lines are Emotion CSS-in-JS compiled output with inline source maps; standard build artifact for this package. | ai | |
| dependencies | unvetted-dep:emojisplosion | AI (dependencies): Known open-source emoji animation library; stable dep for this UI package. | ai | |
| dependencies | unvetted-dep:@splidejs/splide | AI (dependencies): Known open-source carousel library; stable dep for this UI package. | ai | |
| dependencies | unvetted-dep:@splidejs/react-splide | AI (dependencies): Known React wrapper for Splide; stable dep for this UI package. | ai | |
| dependencies | unvetted-dep:@types/recurly__recurly-js | AI (dependencies): Type definitions package; no runtime risk, stable for this package. | ai | |
| dependencies | unvetted-dep:react-freezeframe | AI (dependencies): Known React wrapper for freezeframe; stable dep for this UI package. | ai | |
| dependencies | unvetted-dep:freezeframe | AI (dependencies): Known open-source GIF animation library; stable dep for this UI package. | ai | |
| phantom-deps | phantom-dep:freezeframe | AI (phantom-deps): freezeframe is a declared runtime dep used via react-freezeframe; phantom-dep heuristic fires because it's not directly imported. | ai | |
| phantom-deps | phantom-dep:@types/recurly__recurly-js | AI (phantom-deps): Type-only package loaded by convention; phantom-dep false positive for this package. | ai |
Versions (showing 35 of 35)
| Version | Deps | Published |
|---|---|---|
| 5.10.0 | 18 / 1 | |
| 5.9.0 | 17 / 0 | |
| 5.8.1 | 17 / 0 | |
| 5.8.0 | 17 / 0 | |
| 5.4.0 | 17 / 0 | |
| 5.3.0 | 17 / 0 | |
| 5.2.0 | 17 / 0 | |
| 5.1.0 | 17 / 0 | |
| 5.0.0 | 17 / 0 | |
| 4.2.3 | 17 / 0 | |
| 4.2.2 | 17 / 0 | |
| 4.2.1 | 17 / 0 | |
| 4.2.0 | 17 / 0 | |
| 4.1.0 | 17 / 0 | |
| 4.0.0 | 17 / 0 | |
| 3.48.2 | 17 / 0 | |
| 3.48.0 | 17 / 0 | |
| 3.47.1 | 17 / 0 | |
| 3.47.0 | 17 / 0 | |
| 3.46.0 | 17 / 0 | |
| 3.45.0 | 17 / 0 | |
| 3.44.0 | 17 / 0 | |
| 3.43.0 | 17 / 0 | |
| 3.42.2 | 17 / 0 | |
| 3.42.1 | 17 / 0 | |
| 3.42.0 | 17 / 0 | |
| 3.41.0 | 17 / 0 | |
| 3.40.1 | 17 / 0 | |
| 3.40.0 | 17 / 0 | |
| 3.39.0 | 17 / 0 | |
| 3.38.3 | 17 / 0 | |
| 3.38.2 | 17 / 0 | |
| 3.38.1 | 17 / 0 | |
| 3.38.0 | 17 / 0 | |
| 3.37.0 | 17 / 0 |