@emotion/is-prop-valid
A function to check whether a prop is valid for HTML and SVG elements
33
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
tkh44emotion-release-botandaristemmatown
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/is-prop-valid.cjs.dev.js | AI (source-diff): Long lines are a large HTML/SVG/React prop-name regex, not obfuscation. This is the expected build artifact for @emotion/is-prop-valid and will recur in every version. | ai | |
| source-diff | obfuscated-file:dist/is-prop-valid.cjs.prod.js | AI (source-diff): Long lines are a large HTML/SVG/React prop-name regex in minified form, not obfuscation. Expected build artifact for this package. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher change from mitchellhamilton to emotion-release-bot is a documented, legitimate transition to an automated release bot for the emotion-js project. Bot has 570 approved / 0 rejected packages. | ai | |
| provenance | no-provenance | AI (provenance): Package predates Sigstore provenance; no provenance attestation is expected for this era of publishing and does not indicate risk for this well-established package. | ai | |
| provenance | missing-githead | AI (provenance): Established Emotion ecosystem package with strong publisher track record; missing gitHead reflects a publish environment change, not a security concern for this package. | ai | |
| source-diff | obfuscated-file:dist/emotion-is-prop-valid.cjs.prod.js | AI (source-diff): Same pattern as dev bundle: minified CJS output with a large prop-name regex. Standard build artifact, no malicious content. | ai | |
| source-diff | obfuscated-file:dist/emotion-is-prop-valid.cjs.dev.js | AI (source-diff): Long lines are a single large regex of valid HTML/SVG/React prop names in a standard Rollup CJS bundle — not obfuscation. Expected build artifact for this package. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): andarist (Mateusz Burzyński) is a well-known, legitimate Emotion.js core maintainer. Addition is consistent with the project's known contributor history. | ai |
Versions (showing 33 of 33)
| Version | Deps | Published |
|---|---|---|
| 1.4.0 | 1 / 2 | |
| 1.3.1 | 1 / 2 | |
| 1.3.0 | 1 / 2 | |
| 1.2.2 | 1 / 2 | |
| 1.2.1 | 1 / 2 | |
| 1.2.0 | 1 / 2 | |
| 1.1.3 | 1 / 2 | |
| 1.1.2 | 1 / 1 | |
| 1.1.1 | 1 / 1 | |
| 1.1.0 | 1 / 1 | |
| 1.0.0 | 1 / 1 | |
| 0.8.8 | 1 / 1 | |
| 0.8.7 | 1 / 1 | |
| 0.8.6 | 1 / 1 | |
| 0.8.5 | 1 / 1 | |
| 0.8.4 | 1 / 1 | |
| 0.8.3 | 1 / 1 | |
| 0.8.2 | 1 / 1 | |
| 0.8.1 | 1 / 1 | |
| 0.7.3 | 1 / 1 | |
| 0.7.2 | 1 / 1 | |
| 0.7.1 | 1 / 1 | |
| 0.7.0 | 1 / 1 | |
| 0.6.8 | 1 / 0 | |
| 0.6.7 | 1 / 0 | |
| 0.6.6 | 1 / 0 | |
| 0.6.5 | 1 / 0 | |
| 0.6.4 | 1 / 0 | |
| 0.6.3 | 1 / 0 | |
| 0.6.2 | 1 / 0 | |
| 0.6.1 | 1 / 0 | |
| 0.6.0 | 1 / 0 | |
| 0.5.2 | 0 / 0 |