← Home

@cognigy/chat-components

npm Repository Homepage

[![ESLint](https://github.com/Cognigy/chat-components/actions/workflows/eslint.yml/badge.svg)](https://github.com/Cognigy/chat-components/actions/workflows/eslint.yml)

2
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

mayrbenjamin92pedilykwintodshirelkolappcatharsis68cu4nt0mx.jordarchhetri-cognigyfkhalidlucasdssramosf.asadjortegadiazcognigymastasky

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:new-function-constructor AI (semgrep): Intentional pattern: evaluates user-configured flatpickr enable/disable function string for date picker; stable across versions. ai
dependencies unvetted-dep:@fontsource/figtree AI (dependencies): @fontsource/figtree is a standard Google Fonts package; no security concerns. ai

Versions (showing 2 of 2)

Version Deps Published
0.71.0 15 / 28
0.70.0 15 / 27

v0.71.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.70.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.