@contractspec/lib.ui-kit-web
Web UI components with Radix primitives
12
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
farzim
Keywords
contractspecuiwebradixcomponentstypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | no-description | AI (npm-metadata): Scoped monorepo package; description omission is common in internal component libraries. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Monorepo component; empty main and missing description are artifacts of build/publish process, not malware indicators. | ai | |
| provenance | no-provenance | AI (provenance): Provenance is not yet standard practice; stable for this package. | ai | |
| phantom-deps | phantom-dep:echarts | AI (phantom-deps): Config-referenced optional dependency; stable for this package. | ai | |
| phantom-deps | phantom-dep:next | AI (phantom-deps): Config-referenced peer dependency; stable pattern for Next.js UI kit. | ai | |
| phantom-deps | phantom-dep:next-themes | AI (phantom-deps): Config-referenced peer dependency; stable for Next.js UI kit. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-context-menu | AI (phantom-deps): Config-referenced component dependency; stable for UI kit. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-hover-card | AI (dependencies): Radix UI is a well-known, trusted component library; stable false positive for this UI kit package. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-avatar | AI (dependencies): Radix UI is a well-known, trusted component library; stable false positive for this UI kit package. | ai | |
| phantom-deps | phantom-dep:@contractspec/lib.contracts-spec | AI (phantom-deps): Same-org dep; phantom-dep heuristic is a stable false positive here. | ai | |
| phantom-deps | phantom-dep:tailwind-merge | AI (phantom-deps): Config-file reference in a UI kit; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:lucide-react | AI (phantom-deps): Config-file reference in a UI kit; stable false positive for this package. | ai |