← Home

@darajs/ui-notifications

Notification system for the Dara UI Framework

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

krzysztof-causalens

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions CI/CD with SLSA attestation; legitimate automation migration for causalens/dara monorepo. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy explained by CI/CD pipeline migration; SLSA provenance confirms legitimate publish from the official repo. ai
dependencies unvetted-dep:@darajs/ui-utils AI (dependencies): Sibling monorepo package from the same org/repo; versioned in lockstep, not an independent risk. ai

Versions (showing 51 of 156)

View all versions
Version Deps Published
1.29.4 7 / 17
1.29.3 7 / 17
1.29.0 7 / 16
1.28.6 7 / 16
1.28.5 7 / 16
1.28.4 7 / 16
1.28.3 7 / 16
1.28.2 7 / 16
1.28.1 7 / 16
1.28.0 7 / 16
1.27.1 7 / 16
1.27.0 7 / 16
1.26.13 7 / 16
1.26.12 7 / 16
1.26.11 7 / 18
1.26.10 7 / 18
1.26.9 7 / 18
1.26.8 7 / 18
1.26.7 7 / 18
1.26.6 7 / 18
1.26.5 7 / 18
1.26.4 7 / 18
1.26.3 7 / 18
1.26.2 7 / 18
1.26.1 7 / 18
1.26.0 7 / 18
1.25.6 7 / 18
1.25.5 7 / 18
1.25.4 7 / 18
1.25.3 7 / 18
1.25.2 7 / 18
1.25.1 7 / 18
1.25.0 7 / 18
1.24.3 7 / 18
1.24.2 7 / 18
1.24.1 7 / 18
1.24.0 7 / 18
1.23.1 7 / 19
1.23.0 7 / 19
1.22.4 7 / 19
1.22.0 7 / 19
1.21.25 7 / 19
1.21.24 7 / 19
1.21.23 7 / 19
1.21.22 7 / 19
1.21.21 7 / 19
1.21.20 7 / 19
1.21.19 7 / 19
1.21.18 7 / 19
1.21.17 7 / 19
1.21.16 7 / 19

v1.29.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.29.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.29.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.