@dathomir/components
Web Components high-level API for Dathomir framework
7
Versions
MPL-2.0
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
No source commit
Maintainers
takuma-ru
Keywords
dathomirweb-componentscustom-elementsshadow-domframeworkfrontendjavascripttypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| license | weak-copyleft-license:MPL-2.0 | AI (license): MPL-2.0 is a legitimate open-source license used intentionally by this package; not a security concern. | ai | |
| provenance | slsa-provenance | AI (provenance): SLSA provenance attestation is a positive signal; this finding is informational and should not trigger review. | ai |