← Home

@darajs/ui-widgets

The UI widgets built on top of UI components

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

krzysztof-causalens

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions CI is expected for a monorepo adopting SLSA provenance; SLSA attestation confirms integrity. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy followed by CI-published release with SLSA attestation and no material changes; consistent with a legitimate release cadence change. ai
phantom-deps phantom-dep:react-dom AI (phantom-deps): Declared as runtime dep; phantom-dep heuristic false positive for config-referenced packages. ai
phantom-deps phantom-dep:lodash AI (phantom-deps): Declared as runtime dep; referenced in config files is a known heuristic false positive for this monorepo package. ai
phantom-deps phantom-dep:@darajs/ui-utils AI (phantom-deps): Same-org monorepo package; stable false positive for this package. ai
phantom-deps phantom-dep:@darajs/ui-icons AI (phantom-deps): Same-org monorepo package; stable false positive for this package. ai
phantom-deps phantom-dep:nanoid AI (phantom-deps): Declared as runtime dep; phantom-dep heuristic false positive for config-referenced packages. ai

Versions (showing 100 of 156)

Version Deps Published
1.29.4 8 / 16
1.29.3 8 / 16
1.29.0 8 / 18
1.28.6 8 / 18
1.28.5 8 / 18
1.28.4 8 / 18
1.28.3 8 / 18
1.28.2 8 / 18
1.28.1 8 / 18
1.28.0 8 / 18
1.27.1 8 / 18
1.27.0 8 / 18
1.26.13 8 / 18
1.26.12 8 / 18
1.26.11 8 / 20
1.26.10 8 / 20
1.26.9 8 / 20
1.26.8 8 / 20
1.26.7 8 / 20
1.26.6 8 / 20
1.26.5 8 / 20
1.26.4 8 / 20
1.26.3 8 / 20
1.26.2 8 / 20
1.26.1 8 / 20
1.26.0 8 / 20
1.25.6 8 / 20
1.25.5 8 / 20
1.25.4 8 / 20
1.25.3 8 / 20
1.25.2 8 / 20
1.25.1 8 / 20
1.25.0 8 / 20
1.24.3 8 / 20
1.24.2 8 / 20
1.24.1 8 / 20
1.24.0 8 / 20
1.23.1 8 / 20
1.23.0 8 / 20
1.22.4 8 / 20
1.22.0 8 / 20
1.21.25 8 / 20
1.21.24 8 / 20
1.21.23 8 / 20
1.21.22 8 / 20
1.21.21 8 / 20
1.21.20 8 / 20
1.21.19 8 / 20
1.21.18 8 / 20
1.21.17 8 / 20
1.21.16 8 / 20
1.21.15 8 / 20
1.21.14 8 / 20
1.21.13 8 / 20
1.21.12 8 / 20
1.21.11 8 / 20
1.21.10 8 / 20
1.21.9 8 / 20
1.21.8 8 / 20
1.21.7 8 / 20
1.21.6 8 / 20
1.21.5 8 / 20
1.21.4 8 / 20
1.21.3 8 / 20
1.21.2 8 / 20
1.21.1 8 / 20
1.21.0 8 / 20
1.20.3 8 / 20
1.20.2 8 / 20
1.20.1 8 / 20
1.20.0 8 / 20
1.19.1 8 / 20
1.19.0 8 / 20
1.18.11 8 / 30
1.18.10 8 / 30
1.18.9 8 / 30
1.18.8 8 / 30
1.18.7 8 / 30
1.18.6 8 / 30
1.18.5 8 / 30
1.18.4 8 / 30
1.18.3 8 / 30
1.18.2 8 / 30
1.18.1 8 / 30
1.18.0 8 / 30
1.17.6 8 / 30
1.17.5 8 / 30
1.17.4 8 / 30
1.17.3 8 / 30
1.17.2 8 / 30
1.17.1 8 / 30
1.17.0 8 / 30
1.16.23 8 / 30
1.16.22 8 / 30
1.16.21 8 / 30
1.16.20 8 / 30
1.16.19 8 / 30
1.16.18 8 / 30
1.16.17 8 / 30
1.16.16 8 / 30
Showing 100 of 156 Next page →

v1.29.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.29.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.29.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.