← Home

@deephaven/components

npm Repository Homepage
16
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

vbabichmofojedmikebenderniloc132jnumainvilledeephaven-botbinglesmattrunyon

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Deephaven migrated publishing to GitHub Actions CI with SLSA attestation; this is the expected publisher going forward. ai
maintainer-change maintainer-added AI (maintainer-change): Normal team rotation at an established org; SLSA attestation confirms supply chain integrity. ai
maintainer-change maintainer-removed AI (maintainer-change): Normal team rotation; no compromise indicators given SLSA provenance and established org context. ai
phantom-deps phantom-dep:bootstrap AI (phantom-deps): Bootstrap is used as a CSS/SCSS dependency in this UI library, not imported as a JS module — phantom-dep false positive. ai

Versions (showing 16 of 16)

Version Deps Published
1.22.1 38 / 3
1.22.0 38 / 3
1.21.1 38 / 3
1.17.0 31 / 3
1.16.0 31 / 3
1.14.0 31 / 3
1.13.0 31 / 3
1.12.1 31 / 3
1.12.0 31 / 3
1.11.0 31 / 3
1.10.0 31 / 3
1.5.2 30 / 3
1.4.0 30 / 3
1.3.0 30 / 3
1.1.0 30 / 3
1.0.0 30 / 3