@ghentcdh/json-forms-vue
A json-forms library for Vue.js that allows you to create forms based on a JSON schema and a UI schema.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | source-size-dropped | AI (source-diff): Package is explicitly a re-export shim after deprecation; size drop is intentional and documented. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Declared as runtime dep, re-exported via shim to crouton-forms-vue; not directly imported in shim code. | ai | |
| phantom-deps | phantom-dep:vee-validate | AI (phantom-deps): Same as zod — re-exported dependency in shim package, not directly imported. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get() used in a Proxy get-trap for transparent delegation; standard pattern, not obfuscation. | ai |
Versions (showing 35 of 35)
| Version | Deps | Published |
|---|---|---|
| 3.0.5 | 0 / 0 | |
| 3.0.4 | 0 / 0 | |
| 3.0.3 | 0 / 0 | |
| 3.0.2 | 0 / 0 | |
| 3.0.0 | 3 / 3 | |
| 2.0.0 | 2 / 3 | |
| 1.1.1 | 0 / 7 | |
| 1.1.0 | 0 / 7 | |
| 1.0.5 | 0 / 6 | |
| 1.0.4 | 0 / 6 | |
| 1.0.3 | 0 / 6 | |
| 1.0.2 | 0 / 6 | |
| 1.0.1 | 0 / 6 | |
| 0.8.6 | 0 / 8 | |
| 0.8.5 | 0 / 8 | |
| 0.8.3 | 0 / 8 | |
| 0.8.2 | 0 / 8 | |
| 0.8.1 | 0 / 8 | |
| 0.7.0 | 0 / 8 | |
| 0.6.9 | 0 / 8 | |
| 0.6.8 | 0 / 8 | |
| 0.6.7 | 0 / 8 | |
| 0.6.6 | 0 / 8 | |
| 0.6.5 | 0 / 8 | |
| 0.6.1 | 0 / 0 | |
| 0.6.0 | 0 / 0 | |
| 0.5.1 | 0 / 0 | |
| 0.5.0 | 0 / 0 | |
| 0.4.0 | 0 / 0 | |
| 0.3.0 | 0 / 0 | |
| 0.2.2 | 0 / 0 | |
| 0.2.1 | 0 / 0 | |
| 0.2.0 | 0 / 0 | |
| 0.1.1 | 0 / 0 | |
| 0.1.0 | 0 / 0 |
v3.0.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.0.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.0.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.0.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.