← Home

@deephaven/golden-layout

npm Repository Homepage

A multi-screen javascript Layout manager

31
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

vbabichmofojedmikebenderniloc132jnumainvilledeephaven-botbinglesmattrunyon

Keywords

layout managerjavascriptdockerlayoutpopouts

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-added AI (maintainer-change): Internal org maintainer rotation within Deephaven; consistent with normal team changes. ai
maintainer-change maintainer-removed AI (maintainer-change): Internal org maintainer rotation within Deephaven; no takeover indicators. ai
publish-pattern dormant-publish AI (publish-pattern): Deephaven org bot publisher with SLSA provenance; version diff shows no suspicious changes. ai
phantom-deps phantom-dep:@deephaven/components AI (phantom-deps): Same-org monorepo sibling; declared as dep for type resolution, stable false positive for this package. ai

Versions (showing 31 of 31)

Version Deps Published
1.24.0 3 / 0
1.22.1 3 / 0
1.22.0 3 / 0
1.21.1 3 / 0
1.21.0 3 / 0
1.20.0 3 / 0
1.18.1 3 / 0
1.17.1 3 / 0
1.17.0 3 / 0
1.16.0 3 / 0
1.14.0 3 / 0
1.13.0 3 / 0
1.12.1 3 / 0
1.12.0 3 / 4
1.11.0 3 / 4
1.10.2 3 / 4
1.10.0 3 / 4
1.9.0 3 / 4
1.8.0 3 / 4
1.7.1 3 / 4
1.6.0 3 / 4
1.5.3 3 / 4
1.5.2 3 / 4
1.5.1 3 / 4
1.5.0 3 / 4
1.4.0 3 / 4
1.3.0 3 / 4
1.2.0 3 / 4
1.1.0 3 / 4
1.0.0 3 / 4
0.85.41 3 / 4

v1.24.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.