@diplodoc/components
React components for drawing Diplodoc documentation
26
Versions
MIT
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
rndnmrobot-dataui-npmalexey_w1003y3martyanov-avvseshmakhnatkindiplodoc-botreazy015goldsergseparatrix
Keywords
markdowndocsyfmmddocumentationtooltoolscomponentsdiplodoc
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:langs | AI (dependencies): Common i18n language-list library, benign. | ai | |
| dependencies | unvetted-dep:@gravity-ui/components | AI (dependencies): Established Gravity UI library, benign. | ai | |
| dependencies | unvetted-dep:react-recompose | AI (dependencies): React HOC utility, benign, has type defs devDep. | ai | |
| dependencies | unvetted-dep:bem-cn-lite | AI (dependencies): Established CSS class-naming utility, benign. | ai | |
| dependencies | unvetted-dep:mark.ts | AI (dependencies): Text-highlighting utility, benign. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): Adds sibling @gravity-ui/* package already used throughout deps; consistent with stated function. | ai | |
| dependencies | unvetted-dep:@diplodoc/themes | AI (dependencies): Same org (@diplodoc) as this package; stable sibling dependency across versions. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Package has SLSA provenance; published via CI/CD with Sigstore attestation, mitigating maintainer-change risk. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Active component library; incremental file additions across versions are expected and backed by SLSA provenance. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Postinstall only runs `cd demo && npm i || true` to install storybook demo deps; harmless and consistent across versions. | ai | |
| phantom-deps | phantom-dep:scroll-into-view-if-needed | AI (phantom-deps): Referenced in config files; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@diplodoc/themes | AI (phantom-deps): Same org scope; used transitively via CSS/theme imports, not direct JS import. | ai |
Versions (showing 26 of 26)
| Version | Deps | Published |
|---|---|---|
| 5.16.0 | 24 / 22 | |
| 5.9.4 | 23 / 23 | |
| 5.9.2 | 23 / 23 | |
| 5.9.1 | 23 / 23 | |
| 5.7.3 | 23 / 23 | |
| 5.7.0 | 23 / 23 | |
| 5.5.0 | 23 / 23 | |
| 5.4.0 | 23 / 23 | |
| 5.3.1 | 23 / 23 | |
| 5.3.0 | 23 / 23 | |
| 5.2.7 | 23 / 23 | |
| 5.2.6 | 23 / 23 | |
| 5.2.5 | 23 / 23 | |
| 5.2.3 | 23 / 23 | |
| 5.2.2 | 23 / 24 | |
| 5.2.1 | 23 / 24 | |
| 5.2.0 | 23 / 24 | |
| 5.1.0 | 23 / 24 | |
| 5.0.0 | 22 / 24 | |
| 4.39.2 | 22 / 24 | |
| 4.39.1 | 22 / 24 | |
| 4.39.0 | 22 / 24 | |
| 4.38.7 | 22 / 24 | |
| 4.38.6 | 22 / 24 | |
| 4.38.5 | 22 / 24 | |
| 4.38.4 | 22 / 24 |
v5.16.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.5.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.