@hh.ru/magritte-ui-modal
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@hh.ru/magritte-design-tokens | AI (phantom-deps): Same-org monorepo sub-package; phantom dep pattern is stable across versions. | ai | |
| phantom-deps | phantom-dep:@hh.ru/magritte-internal-layer-name | AI (phantom-deps): Same-org monorepo sub-package; phantom dep pattern is stable across versions. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Monorepo sub-package; missing description/repo/keywords is expected for this package family. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Monorepo sub-package pattern; no description is consistent across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-textarea | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-scrollbar | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-design-tokens | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-action-bar | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-breakpoint | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-progress-bar | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-theme-wrapper | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-tree-selector | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-icon | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-mock-component | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-common-dom-storage | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-content-overlay | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-common-modal-helper | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-internal-layer-name | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-common-is-server-env | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-common-use-no-bubbling | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-common-func-utils | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-layer | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-title | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai | |
| dependencies | unvetted-dep:@hh.ru/magritte-ui-divider | AI (dependencies): Internal sibling package from same org; consistent pattern across all versions. | ai |
Versions (showing 7 of 7)
| Version | Deps | Published |
|---|---|---|
| 10.1.19 | 23 / 0 | |
| 10.1.18 | 23 / 0 | |
| 10.1.2 | 23 / 0 | |
| 10.0.1 | 22 / 0 | |
| 9.3.5 | 22 / 0 | |
| 9.3.4 | 22 / 0 | |
| 9.3.3 | 22 / 0 |
v10.1.19
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v10.1.18
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v10.1.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v10.0.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v9.3.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v9.3.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v9.3.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.