@instantdb/components
Instant's UI components
51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
stopachkanezajdwwdrew-h
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): @radix-ui/react-visually-hidden is a well-known Radix UI primitive; consistent with existing Radix deps in this package. | ai | |
| provenance | missing-githead | AI (provenance): Explained by CI/CD environment change; SLSA provenance attestation provides stronger integrity signal. | ai | |
| provenance | publisher-changed | AI (provenance): Legitimate migration to GitHub Actions CI with SLSA attestation; consistent with instantdb org's publishing pattern. | ai | |
| phantom-deps | phantom-dep:@babel/parser | AI (phantom-deps): Framework-scoped package loaded by convention in Babel toolchain. | ai | |
| phantom-deps | phantom-dep:export-to-csv | AI (phantom-deps): Referenced in config files; expected utility for component library. | ai | |
| phantom-deps | phantom-dep:markdown-table | AI (phantom-deps): Referenced in config files; expected utility for component library. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-collapsible | AI (phantom-deps): Referenced in config files; expected Radix UI component dependency. | ai | |
| phantom-deps | phantom-dep:react-intersection-observer | AI (phantom-deps): Referenced in config files; expected utility for component library. | ai | |
| phantom-deps | phantom-dep:nuqs | AI (phantom-deps): Referenced in config files for a Vite-based component library; expected transitive dependency. | ai | |
| phantom-deps | phantom-dep:motion | AI (phantom-deps): Referenced in config files; expected for animation library in component library. | ai | |
| phantom-deps | phantom-dep:@babel/types | AI (phantom-deps): Framework-scoped package loaded by convention in Babel toolchain. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-tooltip | AI (dependencies): @radix-ui/react-tooltip is a well-known, widely-used React UI primitive from the Radix UI project. Standard dependency for a UI component library. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-dropdown-menu | AI (dependencies): @radix-ui/react-dropdown-menu is a well-known, widely-used React UI primitive from the Radix UI project. Standard dependency for a UI component library. | ai | |
| phantom-deps | phantom-dep:@instantdb/admin | AI (phantom-deps): Same-org package in a monorepo context; expected phantom dep pattern for @instantdb/* packages. | ai | |
| phantom-deps | phantom-dep:@instantdb/version | AI (phantom-deps): Same-org package in a monorepo context; expected phantom dep pattern for @instantdb/* packages. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-select | AI (dependencies): @radix-ui/react-select is a well-known, widely-used React UI primitive from the Radix UI project. Standard dependency for a UI component library. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-dialog | AI (dependencies): @radix-ui/react-dialog is a well-known, widely-used React UI primitive from the Radix UI project. Standard dependency for a UI component library. | ai | |
| provenance | slsa-provenance | AI (provenance): Package is published via GitHub Actions CI/CD with SLSA provenance attestation; this is the expected and documented release process for the instantdb monorepo. | ai |
Versions (showing 51 of 148)
| Version | Deps | Published |
|---|---|---|
| 1.0.52 | 40 / 25 | |
| 1.0.51 | 40 / 25 | |
| 1.0.50 | 40 / 25 | |
| 1.0.49 | 40 / 25 | |
| 1.0.48 | 40 / 25 | |
| 1.0.47 | 40 / 25 | |
| 1.0.46 | 40 / 25 | |
| 1.0.45 | 40 / 25 | |
| 1.0.44 | 40 / 25 | |
| 1.0.43 | 40 / 25 | |
| 1.0.42 | 40 / 25 | |
| 1.0.41 | 40 / 25 | |
| 1.0.40 | 40 / 25 | |
| 1.0.39 | 40 / 25 | |
| 1.0.38 | 40 / 25 | |
| 1.0.37 | 40 / 25 | |
| 1.0.36 | 40 / 25 | |
| 1.0.35 | 40 / 25 | |
| 1.0.34 | 40 / 25 | |
| 1.0.33 | 40 / 25 | |
| 1.0.32 | 40 / 25 | |
| 1.0.31 | 40 / 25 | |
| 1.0.30 | 40 / 25 | |
| 1.0.29 | 40 / 25 | |
| 1.0.28 | 40 / 25 | |
| 1.0.27 | 40 / 25 | |
| 1.0.26 | 40 / 25 | |
| 1.0.25 | 40 / 25 | |
| 1.0.24 | 40 / 25 | |
| 1.0.23 | 40 / 25 | |
| 1.0.22 | 40 / 25 | |
| 1.0.21 | 40 / 25 | |
| 1.0.20 | 40 / 25 | |
| 1.0.19 | 40 / 25 | |
| 1.0.18 | 40 / 25 | |
| 1.0.17 | 40 / 25 | |
| 1.0.16 | 40 / 25 | |
| 1.0.15 | 40 / 25 | |
| 1.0.14 | 40 / 25 | |
| 1.0.13 | 40 / 25 | |
| 1.0.12 | 40 / 25 | |
| 1.0.11 | 40 / 25 | |
| 1.0.10 | 40 / 25 | |
| 1.0.9 | 40 / 25 | |
| 1.0.8 | 40 / 25 | |
| 1.0.7 | 40 / 25 | |
| 1.0.6 | 40 / 25 | |
| 1.0.5 | 40 / 25 | |
| 1.0.4 | 40 / 25 | |
| 1.0.3 | 40 / 25 | |
| 1.0.2 | 40 / 25 |
v1.0.52
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.51
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.50
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.