@coinbase/cds-mobile
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): CI-published Coinbase internal package; provenance absence is consistent across all versions. | ai | |
| dependencies | unvetted-dep:@react-spring/native | AI (dependencies): Established animation library; expected dependency for a mobile UI component system. | ai | |
| dependencies | unvetted-dep:@coinbase/cds-lottie-files | AI (dependencies): Internal Coinbase CDS package; consistent with this package's ecosystem. | ai | |
| phantom-deps | phantom-dep:type-fest | AI (phantom-deps): type-fest is a TypeScript utility types package; declared as a dependency for type re-exports, not necessarily imported at runtime. | ai |
Versions (showing 98 of 98)
| Version | Deps | Published |
|---|---|---|
| 9.8.0 | 12 / 20 | |
| 9.7.2 | 12 / 20 | |
| 9.7.1 | 12 / 20 | |
| 9.7.0 | 12 / 20 | |
| 9.6.11 | 12 / 20 | |
| 9.6.10 | 12 / 20 | |
| 9.6.9 | 12 / 20 | |
| 9.6.8 | 12 / 20 | |
| 9.6.7 | 12 / 20 | |
| 9.6.6 | 12 / 20 | |
| 9.6.5 | 12 / 20 | |
| 9.6.4 | 12 / 20 | |
| 9.6.3 | 12 / 20 | |
| 9.6.2 | 12 / 20 | |
| 9.6.1 | 12 / 20 | |
| 9.6.0 | 12 / 20 | |
| 9.5.0 | 12 / 20 | |
| 9.4.3 | 12 / 20 | |
| 9.4.2 | 12 / 20 | |
| 9.4.1 | 12 / 20 | |
| 9.4.0 | 12 / 20 | |
| 9.3.1 | 12 / 20 | |
| 9.3.0 | 12 / 20 | |
| 9.2.2 | 12 / 20 | |
| 9.2.1 | 12 / 20 | |
| 9.2.0 | 12 / 20 | |
| 9.1.3 | 12 / 20 | |
| 9.1.2 | 12 / 20 | |
| 9.1.1 | 12 / 20 | |
| 9.1.0 | 12 / 20 | |
| 9.0.2 | 12 / 20 | |
| 9.0.1 | 12 / 20 | |
| 9.0.0 | 12 / 20 | |
| 8.75.4 | 11 / 21 | |
| 8.75.3 | 11 / 21 | |
| 8.75.2 | 11 / 21 | |
| 8.75.1 | 11 / 21 | |
| 8.75.0 | 11 / 21 | |
| 8.74.3 | 11 / 21 | |
| 8.74.2 | 11 / 21 | |
| 8.74.1 | 11 / 21 | |
| 8.74.0 | 11 / 21 | |
| 8.73.0 | 11 / 21 | |
| 8.72.0 | 11 / 21 | |
| 8.71.0 | 11 / 21 | |
| 8.70.0 | 11 / 21 | |
| 8.69.1 | 11 / 21 | |
| 8.69.0 | 11 / 21 | |
| 8.68.0 | 11 / 21 | |
| 8.67.0 | 11 / 21 | |
| 8.66.2 | 11 / 21 | |
| 8.66.1 | 11 / 21 | |
| 8.62.1 | 11 / 22 | |
| 8.59.0 | 10 / 22 | |
| 8.58.0 | 10 / 22 | |
| 8.57.1 | 10 / 22 | |
| 8.57.0 | 10 / 22 | |
| 8.56.1 | 10 / 22 | |
| 8.56.0 | 10 / 22 | |
| 8.55.1 | 10 / 22 | |
| 8.55.0 | 10 / 22 | |
| 8.54.0 | 10 / 22 | |
| 8.53.1 | 10 / 23 | |
| 8.53.0 | 10 / 23 | |
| 8.51.0 | 10 / 23 | |
| 8.48.2 | 10 / 23 | |
| 8.47.4 | 10 / 23 | |
| 8.47.0 | 10 / 23 | |
| 8.46.1 | 10 / 23 | |
| 8.44.2 | 10 / 23 | |
| 8.44.1 | 10 / 23 | |
| 8.43.0 | 10 / 23 | |
| 8.40.0 | 10 / 23 | |
| 8.38.2 | 10 / 23 | |
| 8.36.2 | 10 / 24 | |
| 8.36.1 | 10 / 24 | |
| 8.34.0 | 10 / 24 | |
| 8.33.1 | 10 / 24 | |
| 8.31.5 | 9 / 24 | |
| 8.30.1 | 9 / 24 | |
| 8.30.0 | 9 / 24 | |
| 8.28.2 | 9 / 24 | |
| 8.26.0 | 9 / 24 | |
| 8.21.6 | 9 / 24 | |
| 8.21.5 | 9 / 24 | |
| 8.21.4 | 9 / 24 | |
| 8.21.3 | 9 / 24 | |
| 8.21.1 | 9 / 24 | |
| 8.20.0 | 9 / 24 | |
| 8.19.1 | 9 / 24 | |
| 8.17.6 | 9 / 24 | |
| 8.17.4 | 9 / 24 | |
| 8.16.2 | 9 / 24 | |
| 8.16.1 | 9 / 24 | |
| 8.14.2 | 9 / 24 | |
| 8.13.6 | 9 / 24 | |
| 8.13.5 | 9 / 24 | |
| 8.13.1 | 9 / 24 |
v9.8.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.7.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.7.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.7.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.6.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.