← Home

@hanzogui/portal

npm
9
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

artemis-primezeekay

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata no-description AI (npm-metadata): Internal library in monorepo; missing description is expected for scoped packages. ai
phantom-deps phantom-dep:@hanzogui/use-event AI (phantom-deps): @hanzogui/use-event is declared in dependencies; phantom-dep heuristic false positive. ai
bogus-package bogus-package AI (bogus-package): Scoped package in active monorepo; missing metadata is common for internal libraries, not spam indicator. ai

Versions (showing 9 of 9)

Version Deps Published
7.0.0 7 / 4
3.0.2 7 / 4
3.0.1 7 / 4
3.0.0 7 / 4
2.0.8 7 / 4
2.0.7 7 / 4
2.0.5 7 / 4
2.0.4 7 / 4
2.0.0 7 / 4