@gamepark/react-game
React components & tools to create a Board Game user interface for Game Park
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/components/material/sound/bellSound.js | AI (source-diff): Long lines are base64-encoded MP3 audio data URI, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/components/material/sound/bellSound.d.ts | AI (source-diff): Long lines are base64-encoded MP3 audio data URI, not obfuscated code. | ai | |
| dependencies | unvetted-dep:i18next-icu | AI (dependencies): i18next-icu is a standard i18next plugin for ICU message format; legitimate dependency. | ai | |
| dependencies | unvetted-dep:use-long-press | AI (dependencies): use-long-press is a popular React hook library; legitimate for game UI interactions. | ai | |
| dependencies | unvetted-dep:@gamepark/api-types | AI (dependencies): Same org scope (@gamepark); internal dependency, stable false positive. | ai | |
| dependencies | unvetted-dep:@gamepark/avataaars | AI (dependencies): Same org scope (@gamepark); internal avatar component library. | ai | |
| dependencies | unvetted-dep:o9n | AI (dependencies): o9n is a legitimate screen orientation polyfill; stable false positive for this UI library. | ai | |
| dependencies | unvetted-dep:@gamepark/react-client | AI (dependencies): Same org scope (@gamepark); internal React client library. | ai | |
| dependencies | unvetted-dep:@datadog/browser-logs | AI (dependencies): Official Datadog browser logging SDK; well-known vendor package. | ai | |
| dependencies | unvetted-dep:nosleep.js | AI (dependencies): nosleep.js is a well-known library to prevent screen sleep; appropriate for a game UI. | ai | |
| phantom-deps | phantom-dep:@gamepark/api-types | AI (phantom-deps): Same-org dep; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:intl-messageformat | AI (phantom-deps): intl-messageformat is a runtime dep; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:rxjs | AI (phantom-deps): rxjs is a runtime dep used transitively; phantom-dep heuristic false positive for this package. | ai |
Versions (showing 51 of 63)
| Version | Deps | Published |
|---|---|---|
| 7.7.40 | 18 / 19 | |
| 7.7.39 | 18 / 19 | |
| 7.7.38 | 18 / 19 | |
| 7.7.37 | 18 / 19 | |
| 7.7.36 | 18 / 19 | |
| 7.7.35 | 18 / 19 | |
| 7.7.34 | 18 / 19 | |
| 7.7.33 | 18 / 19 | |
| 7.7.32 | 18 / 19 | |
| 7.7.31 | 18 / 19 | |
| 7.7.30 | 18 / 19 | |
| 7.7.29 | 18 / 19 | |
| 7.7.28 | 18 / 19 | |
| 7.7.27 | 18 / 19 | |
| 7.7.26 | 18 / 19 | |
| 7.7.25 | 18 / 19 | |
| 7.7.23 | 18 / 19 | |
| 7.7.21 | 18 / 19 | |
| 7.7.20 | 18 / 19 | |
| 7.7.19 | 18 / 19 | |
| 7.7.15 | 18 / 19 | |
| 7.7.14 | 18 / 19 | |
| 7.7.12 | 18 / 19 | |
| 7.7.11 | 18 / 19 | |
| 7.7.10 | 18 / 19 | |
| 7.7.9 | 18 / 19 | |
| 7.7.8 | 18 / 19 | |
| 7.7.4 | 18 / 18 | |
| 7.7.3 | 18 / 18 | |
| 7.7.2 | 18 / 18 | |
| 7.7.1 | 18 / 18 | |
| 7.7.0 | 18 / 18 | |
| 7.6.6 | 18 / 18 | |
| 7.6.4 | 18 / 18 | |
| 7.6.3 | 18 / 18 | |
| 7.6.2 | 18 / 18 | |
| 7.6.1 | 18 / 18 | |
| 7.6.0 | 18 / 18 | |
| 7.5.18 | 18 / 18 | |
| 7.5.17 | 18 / 18 | |
| 7.5.16 | 18 / 18 | |
| 7.5.15 | 18 / 18 | |
| 7.5.14 | 18 / 18 | |
| 7.5.13 | 18 / 18 | |
| 7.5.12 | 18 / 18 | |
| 7.5.11 | 18 / 18 | |
| 7.5.10 | 18 / 18 | |
| 7.5.9 | 18 / 18 | |
| 7.5.8 | 18 / 18 | |
| 7.5.3 | 18 / 18 | |
| 7.5.2 | 18 / 18 |
v7.7.40
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.7.39
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.7.38
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.7.37
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.7.36
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.7.35
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.