@digdir/designsystemet-web
Javascript for Designsystemet
9
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
oyvindthunebarsnesmimarz
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/umd/index.js | AI (source-diff): Standard UMD minified bundle for a design system library; content is a recognizable polyfill, not obfuscation. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publisher is consistent with SLSA provenance attestation; legitimate automation change. | ai | |
| provenance | missing-githead | AI (provenance): SLSA provenance attestation provides stronger commit linkage than gitHead field; absence is benign here. | ai | |
| phantom-deps | phantom-dep:@u-elements/u-progress | AI (phantom-deps): Declared as a runtime dep in package.json; used via config/bundler rather than direct import — stable false positive for this package. | ai |