@dcl/slack-component
Slack component for core components library
12
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
decentralandbotimazzara
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions publisher with SLSA attestation; consistent with Decentraland org CI/CD migration. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainer is within the Decentraland org context; accompanied by SLSA provenance attestation. | ai | |
| phantom-deps | phantom-dep:@slack/webhook | AI (phantom-deps): Slack webhook is a peer/optional integration dep; phantom-dep heuristic fires but no real risk for this package. | ai | |
| phantom-deps | phantom-dep:@dcl/core-commons | AI (phantom-deps): Same org scope (@dcl); phantom-dep heuristic is a stable false positive for this package. | ai |