@finos/legend-art Apache-2.0 43 versions

@finos/legend-art

npm Repository Homepage

Legend shared visual components and component utilities

43

Versions

Apache-2.0

License

No

Install Scripts

Missing

Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

finos-adminmaootexodusneil.slinger

Keywords

legendcomponentshared-componentutilities

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
dependencies	unvetted-dep:react-reflex	AI (dependencies): react-reflex is a standard React layout component; no malware indicators.	ai	2026/04/30
dependencies	unvetted-dep:@fontsource/ubuntu-mono	AI (dependencies): Fontsource packages are well-known font distribution libraries; no risk.	ai	2026/04/30
dependencies	unvetted-dep:@fontsource/roboto-serif	AI (dependencies): Fontsource packages are well-known font distribution libraries; no risk.	ai	2026/04/30
phantom-deps	phantom-dep:@fontsource/roboto	AI (phantom-deps): Font packages are CSS-only side-effect imports; not directly imported in JS.	ai	2026/04/29
phantom-deps	phantom-dep:@fontsource/raleway	AI (phantom-deps): Font packages are CSS-only side-effect imports; not directly imported in JS.	ai	2026/04/29
phantom-deps	phantom-dep:@types/react-window	AI (phantom-deps): Type-only package; stable false positive for this UI library.	ai	2026/04/29
phantom-deps	phantom-dep:@fontsource/roboto-mono	AI (phantom-deps): Font packages are CSS-only side-effect imports.	ai	2026/04/29
phantom-deps	phantom-dep:react-dom	AI (phantom-deps): UI component library; react-dom is a peer/framework dep loaded by convention, not directly imported.	ai	2026/04/29
phantom-deps	phantom-dep:@fontsource/roboto-serif	AI (phantom-deps): Font packages are CSS-only side-effect imports.	ai	2026/04/29
phantom-deps	phantom-dep:@fontsource/jetbrains-mono	AI (phantom-deps): Font packages are CSS-only side-effect imports.	ai	2026/04/29
phantom-deps	phantom-dep:@fontsource/roboto-condensed	AI (phantom-deps): Font packages are CSS-only side-effect imports.	ai	2026/04/29
phantom-deps	phantom-dep:@fontsource/ubuntu-mono	AI (phantom-deps): Font packages are CSS-only side-effect imports.	ai	2026/04/29
phantom-deps	phantom-dep:@types/react	AI (phantom-deps): Type-only package loaded by convention in TS projects; stable false positive for this package.	ai	2026/04/29
phantom-deps	phantom-dep:@emotion/styled	AI (phantom-deps): MUI/emotion styling dep referenced in config; expected for a UI component library.	ai	2026/04/29

Versions (showing 43 of 43)

Version	Deps	Published
7.1.152	35 / 10	2026-06-05
7.1.151	35 / 10	2026-06-04
7.1.150	35 / 10	2026-06-03
7.1.149	35 / 10	2026-06-03
7.1.148	35 / 10	2026-05-18
7.1.147	35 / 10	2026-04-27
7.1.146	35 / 10	2026-04-13
7.1.129	35 / 10	2025-10-30
7.1.128	35 / 10	2025-10-28
7.1.127	35 / 10	2025-10-22
7.1.126	35 / 10	2025-10-10
7.1.125	35 / 10	2025-10-09
7.1.124	35 / 10	2025-09-27
7.1.123	35 / 10	2025-09-25
7.1.122	35 / 10	2025-09-24
7.1.121	35 / 10	2025-09-19
7.1.120	35 / 10	2025-09-18
7.1.119	35 / 10	2025-09-11
7.1.118	35 / 10	2025-09-02
7.1.117	35 / 10	2025-08-18
7.1.116	35 / 10	2025-08-07
7.1.115	35 / 10	2025-08-05
7.1.114	35 / 10	2025-07-31
7.1.113	35 / 10	2025-07-29
7.1.112	35 / 10	2025-07-22
7.1.111	35 / 10	2025-07-21
7.1.110	35 / 10	2025-07-09
7.1.109	35 / 10	2025-07-02
7.1.108	35 / 10	2025-06-27
7.1.107	35 / 10	2025-06-24
7.1.106	35 / 10	2025-06-23
7.1.105	35 / 10	2025-06-19
7.1.104	35 / 10	2025-06-16
7.1.103	35 / 10	2025-06-02
7.1.102	35 / 10	2025-05-30
7.1.101	35 / 10	2025-05-23
7.1.100	35 / 10	2025-05-22
7.1.99	35 / 10	2025-05-20
7.1.98	35 / 10	2025-05-19
7.1.97	35 / 10	2025-05-16
7.1.96	35 / 10	2025-05-13
7.1.95	35 / 10	2025-05-01
7.1.94	35 / 10	2025-05-01

v7.1.152

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.151

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.150

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.149

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.148

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.146

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.1.129

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.1.128

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.127

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.126

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.125

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.124

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.123

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.122

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.121

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.120

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.119

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.118

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.117

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.116

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.115

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.114

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.113

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.112

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.111

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.110

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.109

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.108

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.107

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.106

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.105

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.104

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.103

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.102

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.101

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.1.100

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.1.99

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.1.98

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.1.97

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.1.96

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.1.95

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.1.94

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.