← Home

@fuf-stack/pixels

npm Repository Homepage
46
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

toxsickschrob3000janine_fuf

Keywords

componentsreact

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions publisher with SLSA provenance attestation; consistent with CI/CD automation for this org. ai
phantom-deps phantom-dep:@heroui/toast AI (phantom-deps): Declared as runtime dep with a Toast export; phantom-dep heuristic misfires here. ai
phantom-deps phantom-dep:next-themes AI (phantom-deps): Listed as runtime dep; used transitively via HeroUI theme components, not directly imported at top level. ai
phantom-deps phantom-dep:framer-motion AI (phantom-deps): Listed as runtime dep; used transitively via HeroUI animation components, not directly imported at top level. ai

Versions (showing 46 of 46)

Version Deps Published
1.13.0 28 / 7
1.12.1 28 / 7
1.12.0 28 / 7
1.11.8 28 / 7
1.11.7 28 / 7
1.11.5 28 / 7
1.11.4 28 / 7
1.11.3 28 / 7
1.11.2 28 / 7
1.11.1 28 / 7
1.11.0 28 / 7
1.10.2 28 / 7
1.10.1 28 / 7
1.10.0 28 / 7
1.9.0 28 / 6
1.8.0 28 / 6
1.7.4 27 / 6
1.7.3 27 / 6
1.7.2 27 / 6
1.7.1 27 / 6
1.7.0 27 / 6
1.6.1 27 / 6
1.6.0 27 / 6
1.5.1 26 / 6
1.5.0 26 / 6
1.4.0 26 / 6
1.3.8 26 / 6
1.3.7 26 / 6
1.3.6 26 / 6
1.3.5 26 / 6
1.3.4 26 / 6
1.3.3 26 / 6
1.3.2 26 / 6
1.3.1 26 / 6
1.3.0 26 / 6
1.2.5 25 / 6
1.2.4 25 / 6
1.2.3 25 / 6
1.2.2 25 / 6
1.2.1 25 / 6
1.2.0 25 / 6
1.1.2 25 / 6
1.1.1 25 / 6
1.1.0 25 / 6
1.0.2 25 / 6
1.0.1 25 / 6

v1.13.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.12.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.12.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.11.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.