@instructure/platform-widget-dashboard
A flexible, extensible dashboard system for Canvas LMS that allows students to customize their learning experience with various widgets.
33
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
svc.brandablecss-ciinstuiciplatform-ui-cikristofkulcsarchristopher.sotobalzss
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@dnd-kit/utilities | AI (phantom-deps): Legitimate UI lib, likely bundled in dist build output. | ai | |
| phantom-deps | phantom-dep:@dnd-kit/core | AI (phantom-deps): Legitimate UI lib, likely bundled in dist build output. | ai | |
| phantom-deps | phantom-dep:@instructure/platform-sanitize | AI (phantom-deps): Same-org internal dep, consistent with existing phantom-dep pattern in this package. | ai | |
| phantom-deps | phantom-dep:@instructure/platform-grades | AI (phantom-deps): Same-org internal dep, consistent with existing phantom-dep pattern in this package. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Legit maintainer addition alongside CI publishing move. | ai | |
| dependencies | unvetted-dep:@instructure/platform-query | AI (dependencies): First-party @instructure org dep replacing uuid; benign. | ai | |
| phantom-deps | phantom-dep:@instructure/platform-query | AI (phantom-deps): Same-org first-party dep, declared-not-imported heuristic; benign bundled/type dependency. | ai | |
| dependencies | unvetted-dep:@instructure/platform-canvas-fetch | AI (dependencies): Same @instructure org scope; consistent with this package's monorepo pattern. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Declared runtime dep in a component library; phantom-dep heuristic fires on re-exported or config-only usage. | ai | |
| phantom-deps | phantom-dep:@tanstack/query-persist-client-core | AI (phantom-deps): Declared runtime dep used in config/setup; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@instructure/platform-graphql-types | AI (phantom-deps): Same-org dep; phantom-dep heuristic unreliable for monorepo packages. | ai | |
| phantom-deps | phantom-dep:@instructure/platform-canvas-fetch | AI (phantom-deps): Same-org dep; phantom-dep heuristic unreliable for monorepo packages. | ai | |
| phantom-deps | phantom-dep:@instructure/platform-datetime | AI (phantom-deps): Same-org dep; phantom-dep heuristic unreliable for monorepo packages. | ai | |
| phantom-deps | phantom-dep:@instructure/platform-alerts | AI (phantom-deps): Same-org dep; phantom-dep heuristic unreliable for monorepo packages. | ai | |
| phantom-deps | phantom-dep:sanitize-html | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): Same pattern — declared dep used indirectly or in config; stable false positive for this package. | ai |
Versions (showing 33 of 33)
| Version | Deps | Published |
|---|---|---|
| 7.9.0 | 12 / 49 | |
| 7.4.3 | 10 / 48 | |
| 7.4.1 | 10 / 48 | |
| 6.4.2 | 8 / 48 | |
| 6.4.1 | 8 / 48 | |
| 6.2.0 | 8 / 48 | |
| 6.1.0 | 8 / 48 | |
| 6.0.0 | 8 / 48 | |
| 5.3.0 | 8 / 49 | |
| 5.2.0 | 8 / 49 | |
| 5.1.0 | 7 / 49 | |
| 4.2.0 | 7 / 15 | |
| 4.1.0 | 7 / 15 | |
| 4.0.3 | 4 / 15 | |
| 4.0.2 | 4 / 15 | |
| 4.0.1 | 4 / 15 | |
| 4.0.0 | 4 / 15 | |
| 3.3.0 | 4 / 15 | |
| 3.2.1 | 4 / 15 | |
| 3.2.0 | 4 / 15 | |
| 3.1.2 | 4 / 15 | |
| 3.1.1 | 4 / 15 | |
| 3.1.0 | 4 / 15 | |
| 3.0.0 | 4 / 14 | |
| 2.0.0 | 4 / 14 | |
| 1.1.0 | 4 / 14 | |
| 1.0.0 | 4 / 14 | |
| 0.5.0 | 4 / 14 | |
| 0.4.0 | 4 / 14 | |
| 0.3.0 | 4 / 14 | |
| 0.2.1 | 4 / 14 | |
| 0.2.0 | 4 / 14 | |
| 0.1.0 | 4 / 14 |
v7.9.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.4.3
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.4.1
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.