@fluentui-react-native/tester
A test app to test FluentUI React Native Components during development
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): @types/node is a Microsoft-published type package; benign addition for this tester app context. | ai | |
| dependencies | unvetted-dep:@fluentui-react-native/e2e-testing | AI (dependencies): First-party FluentUI RN e2e testing package from same Microsoft org. | ai | |
| dependencies | unvetted-dep:@warren-ms/react-native-icons | AI (dependencies): Microsoft internal icons package used consistently across FluentUI RN tester versions. | ai | |
| dependencies | unvetted-dep:@office-iss/react-native-win32 | AI (dependencies): Microsoft-owned Win32 React Native package; stable dep for this package. | ai | |
| dependencies | unvetted-dep:@fortawesome/react-native-fontawesome | AI (dependencies): Official Font Awesome React Native package; stable dep for this package. | ai | |
| dependencies | unvetted-dep:@react-native-community/slider | AI (dependencies): Official React Native community slider; stable dep for this package. | ai | |
| dependencies | unvetted-dep:@react-native-picker/picker | AI (dependencies): Official React Native community picker; stable dep for this package. | ai | |
| dependencies | unvetted-dep:@react-native-menu/menu | AI (dependencies): Well-known React Native community package; stable dep for this Microsoft tester app. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): Raw IP in SVG test component is a local network test fixture, not malicious exfiltration; stable pattern for this test app. | ai | |
| phantom-deps | phantom-dep:@fortawesome/fontawesome-svg-core | AI (phantom-deps): This is a declared direct dependency and peer companion to @fortawesome/react-native-fontawesome; phantom detection is a false positive for this package. | ai | |
| provenance | no-provenance | AI (provenance): Microsoft FluentUI RN bot-published package; no provenance is consistent across all 916 versions and is acceptable for this established package. | ai | |
| dependencies | unvetted-dep:react-native-macos | AI (dependencies): react-native-macos is the official Microsoft React Native macOS platform package; expected for this cross-platform test app. | ai | |
| bogus-package | bogus-package | AI (bogus-package): This is a legitimate Microsoft test app package in a large monorepo; short README and no keywords are cosmetic, not security signals. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Framework-scoped type package loaded by convention; phantom-dep is a false positive for this package type. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): Framework-scoped type package loaded by convention; phantom-dep is a false positive for this package type. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): React is a peer/framework dependency referenced in config files; phantom-dep is a false positive for React Native app packages. | ai | |
| phantom-deps | phantom-dep:react-native-windows | AI (phantom-deps): Platform-specific binary package; phantom-dep finding is expected for this type of dependency in a React Native app. | ai | |
| phantom-deps | phantom-dep:react-native-macos | AI (phantom-deps): Platform-specific binary package; phantom-dep finding is expected for this type of dependency in a React Native app. | ai | |
| phantom-deps | phantom-dep:react-native-svg | AI (phantom-deps): Platform-specific binary package; phantom-dep finding is expected for this type of dependency in a React Native app. | ai | |
| dependencies | unvetted-dep:react-native-windows | AI (dependencies): react-native-windows is the official Microsoft React Native Windows platform package; expected for this cross-platform test app. | ai | |
| dependencies | unvetted-dep:react-native-svg | AI (dependencies): react-native-svg is a well-known, legitimate React Native SVG library; expected dependency for a cross-platform RN test app. | ai |
Versions (showing 51 of 905)
| Version | Deps | Published |
|---|---|---|
| 0.170.51 | 7 / 49 | |
| 0.170.50 | 60 / 27 | |
| 0.170.49 | 60 / 27 | |
| 0.170.48 | 60 / 27 | |
| 0.170.47 | 60 / 27 | |
| 0.170.46 | 60 / 27 | |
| 0.170.45 | 60 / 27 | |
| 0.170.44 | 60 / 27 | |
| 0.170.39 | 60 / 27 | |
| 0.170.36 | 60 / 21 | |
| 0.170.35 | 60 / 21 | |
| 0.170.34 | 60 / 21 | |
| 0.170.32 | 60 / 21 | |
| 0.170.31 | 60 / 21 | |
| 0.170.28 | 60 / 20 | |
| 0.170.27 | 58 / 20 | |
| 0.170.26 | 57 / 20 | |
| 0.170.25 | 57 / 20 | |
| 0.170.24 | 57 / 20 | |
| 0.170.23 | 57 / 20 | |
| 0.170.22 | 56 / 20 | |
| 0.170.21 | 56 / 20 | |
| 0.170.20 | 56 / 20 | |
| 0.170.19 | 56 / 20 | |
| 0.170.18 | 56 / 20 | |
| 0.170.17 | 56 / 20 | |
| 0.170.16 | 56 / 20 | |
| 0.170.15 | 56 / 20 | |
| 0.170.14 | 56 / 20 | |
| 0.170.13 | 56 / 20 | |
| 0.170.12 | 56 / 20 | |
| 0.170.11 | 56 / 20 | |
| 0.170.10 | 56 / 20 | |
| 0.170.9 | 56 / 20 | |
| 0.170.8 | 56 / 20 | |
| 0.170.7 | 56 / 20 | |
| 0.170.6 | 56 / 20 | |
| 0.170.5 | 56 / 20 | |
| 0.170.4 | 56 / 20 | |
| 0.170.3 | 56 / 20 | |
| 0.170.2 | 56 / 20 | |
| 0.170.1 | 56 / 20 | |
| 0.170.0 | 56 / 20 | |
| 0.169.7 | 56 / 20 | |
| 0.169.6 | 56 / 20 | |
| 0.169.5 | 56 / 20 | |
| 0.169.4 | 56 / 20 | |
| 0.169.3 | 56 / 20 | |
| 0.169.2 | 56 / 20 | |
| 0.169.1 | 56 / 20 | |
| 0.169.0 | 56 / 20 |
v0.170.26
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.25
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.24
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.23
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.22
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.21
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.20
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.19
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.18
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.17
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.16
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.15
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.14
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.13
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.12
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.11
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.10
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.9
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.8
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.7
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.5
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.170.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.169.7
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.169.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.169.5
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.169.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.169.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.169.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.169.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.169.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.