@imj_media/ui
Componentes UI
18
Versions
ISC
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
renecarrilloimjmediamariaayalaolafruvalcabaoscar_rubio
Keywords
uicomponentsreact
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): Established icon/animation libs matching stated UI component purpose. | ai | |
| source-diff | obfuscated-file:dist/index.js | AI (source-diff): Standard Vite/Rollup bundle output; sample shows readable React component code, not malicious obfuscation. | ai | |
| dependencies | unvetted-dep:@fortawesome/pro-solid-svg-icons | AI (dependencies): FontAwesome Pro is a known commercial icon set; stable dependency for this UI package. | ai | |
| dependencies | unvetted-dep:@fortawesome/pro-regular-svg-icons | AI (dependencies): FontAwesome Pro is a known commercial icon set; stable dependency for this UI package. | ai | |
| dependencies | unvetted-dep:@fortawesome/pro-duotone-svg-icons | AI (dependencies): FontAwesome Pro is a known commercial icon set; stable dependency for this UI package. | ai | |
| phantom-deps | phantom-dep:element-resize-detector | AI (phantom-deps): Resize utility likely used indirectly through component internals. | ai | |
| phantom-deps | phantom-dep:tailwind-variants | AI (phantom-deps): UI component library; config-level reference without direct import is expected. | ai | |
| phantom-deps | phantom-dep:@tanstack/react-table | AI (phantom-deps): Table components commonly reference via config/type exports without direct import. | ai | |
| phantom-deps | phantom-dep:@types/react-syntax-highlighter | AI (phantom-deps): Type-only package; convention-loaded, not directly imported. | ai | |
| phantom-deps | phantom-dep:@fortawesome/free-brands-svg-icons | AI (phantom-deps): Icon library referenced via config; stable pattern for this UI package. | ai | |
| typosquat | typosquat.levenshtein:uuid | AI (typosquat): Scoped org package @imj_media/ui; levenshtein match to uuid is noise. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped org package; levenshtein match to yup is noise. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped org package; levenshtein match to joi is noise. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped org package; levenshtein match to qs is noise. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped org package; levenshtein match to pg is noise. | ai |
Versions (showing 18 of 18)
| Version | Deps | Published |
|---|---|---|
| 1.10.4 | 24 / 38 | |
| 1.10.1 | 24 / 38 | |
| 1.8.2 | 24 / 38 | |
| 1.8.0 | 24 / 38 | |
| 1.6.16 | 25 / 37 | |
| 1.6.5 | 24 / 37 | |
| 1.4.0 | 24 / 37 | |
| 1.0.78 | 13 / 20 | |
| 1.0.36 | 7 / 20 | |
| 1.0.22 | 7 / 18 | |
| 1.0.21 | 7 / 18 | |
| 1.0.20 | 7 / 18 | |
| 1.0.19 | 7 / 18 | |
| 1.0.18 | 7 / 18 | |
| 1.0.17 | 7 / 18 | |
| 1.0.16 | 7 / 18 | |
| 1.0.15 | 7 / 18 | |
| 1.0.14 | 7 / 18 |
v1.0.78
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.