@codecademy/gamut-icons
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/icons/regular/HammerWrenchIcon.js | AI (source-diff): Long lines are SVG path data in compiled icon components, not obfuscation; stable pattern for this icon library. | ai |
Versions (showing 46 of 46)
| Version | Deps | Published |
|---|---|---|
| 9.57.10 | 2 / 0 | |
| 9.57.9 | 2 / 0 | |
| 9.57.8 | 2 / 0 | |
| 9.57.7 | 2 / 0 | |
| 9.57.6 | 2 / 0 | |
| 9.57.5 | 2 / 0 | |
| 9.57.4 | 2 / 0 | |
| 9.57.3 | 2 / 0 | |
| 9.57.2 | 2 / 0 | |
| 9.57.1 | 2 / 0 | |
| 9.57.0 | 2 / 0 | |
| 9.56.4 | 2 / 0 | |
| 9.56.3 | 2 / 0 | |
| 9.56.2 | 2 / 0 | |
| 9.56.1 | 2 / 0 | |
| 9.56.0 | 2 / 0 | |
| 9.55.1 | 2 / 0 | |
| 9.55.0 | 2 / 0 | |
| 9.54.2 | 2 / 0 | |
| 9.54.1 | 2 / 0 | |
| 9.53.0 | 2 / 0 | |
| 9.52.1 | 2 / 0 | |
| 9.52.0 | 2 / 0 | |
| 9.51.3 | 2 / 0 | |
| 9.51.2 | 2 / 0 | |
| 9.51.1 | 2 / 0 | |
| 9.51.0 | 2 / 0 | |
| 9.50.0 | 2 / 0 | |
| 9.49.2 | 2 / 0 | |
| 9.49.1 | 2 / 0 | |
| 9.49.0 | 2 / 0 | |
| 9.48.0 | 2 / 0 | |
| 9.47.0 | 2 / 0 | |
| 9.46.3 | 2 / 0 | |
| 9.46.2 | 2 / 0 | |
| 9.46.1 | 2 / 0 | |
| 9.46.0 | 2 / 0 | |
| 9.45.0 | 2 / 0 | |
| 9.44.0 | 2 / 0 | |
| 9.43.0 | 2 / 0 | |
| 9.42.4 | 2 / 0 | |
| 9.42.3 | 2 / 0 | |
| 9.26.0 | 2 / 0 | |
| 9.25.0 | 2 / 0 | |
| 9.24.3 | 2 / 0 | |
| 9.24.2 | 2 / 0 |
v9.57.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.26.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.25.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v9.24.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v9.24.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.