← Home

@darajs/ui-utils

General utilities for the Dara UI framework

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

krzysztof-causalens

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions CI/CD is confirmed by SLSA provenance attestation; expected for this package going forward. ai
dependencies unvetted-dep:tinykeys AI (dependencies): tinykeys is a legitimate, widely-used keyboard shortcut library; stable false positive for this package. ai

Versions (showing 51 of 156)

View all versions
Version Deps Published
1.29.4 6 / 12
1.29.3 6 / 12
1.29.0 6 / 17
1.28.6 6 / 17
1.28.5 6 / 17
1.28.4 6 / 17
1.28.3 6 / 17
1.28.2 6 / 17
1.28.1 6 / 17
1.28.0 6 / 17
1.27.1 6 / 17
1.27.0 6 / 17
1.26.13 6 / 17
1.26.12 6 / 17
1.26.11 6 / 20
1.26.10 6 / 20
1.26.9 6 / 20
1.26.8 6 / 20
1.26.7 6 / 20
1.26.6 6 / 20
1.26.5 6 / 20
1.26.4 6 / 20
1.26.3 6 / 20
1.26.2 6 / 20
1.26.1 6 / 20
1.26.0 6 / 20
1.25.6 6 / 20
1.25.5 6 / 20
1.25.4 6 / 20
1.25.3 6 / 20
1.25.2 6 / 20
1.25.1 6 / 20
1.25.0 6 / 20
1.24.3 6 / 20
1.24.2 6 / 20
1.24.1 6 / 20
1.24.0 6 / 20
1.23.1 6 / 20
1.23.0 6 / 20
1.22.4 6 / 20
1.22.0 6 / 20
1.21.25 6 / 20
1.21.24 6 / 20
1.21.23 6 / 20
1.21.22 6 / 20
1.21.21 6 / 20
1.21.20 6 / 20
1.21.19 6 / 20
1.21.18 6 / 20
1.21.17 6 / 20
1.21.16 6 / 20

v1.29.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.29.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.29.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.