@itcase/ui-core
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): react-dom is a peer/runtime dep referenced in config; not directly imported in source is expected for a UI lib. | ai | |
| phantom-deps | phantom-dep:@emotion/is-prop-valid | AI (phantom-deps): Emotion utility referenced in config files only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@itcase/storybook-config | AI (phantom-deps): Same-org storybook config dep; used in build/config context, not directly imported in source. | ai |
Versions (showing 50 of 50)
| Version | Deps | Published |
|---|---|---|
| 1.10.60 | 9 / 22 | |
| 1.10.57 | 9 / 22 | |
| 1.10.55 | 9 / 22 | |
| 1.10.54 | 9 / 22 | |
| 1.10.53 | 9 / 22 | |
| 1.10.52 | 9 / 22 | |
| 1.10.51 | 9 / 22 | |
| 1.10.50 | 9 / 22 | |
| 1.10.49 | 9 / 22 | |
| 1.10.48 | 9 / 22 | |
| 1.10.47 | 9 / 22 | |
| 1.10.46 | 9 / 22 | |
| 1.10.44 | 9 / 22 | |
| 1.10.43 | 9 / 22 | |
| 1.10.37 | 9 / 22 | |
| 1.10.36 | 9 / 22 | |
| 1.10.35 | 9 / 24 | |
| 1.10.31 | 9 / 24 | |
| 1.10.27 | 9 / 24 | |
| 1.10.25 | 9 / 24 | |
| 1.10.24 | 9 / 24 | |
| 1.10.21 | 9 / 24 | |
| 1.10.15 | 9 / 24 | |
| 1.10.14 | 9 / 24 | |
| 1.10.13 | 9 / 24 | |
| 1.10.12 | 9 / 24 | |
| 1.10.11 | 9 / 24 | |
| 1.10.10 | 9 / 24 | |
| 1.10.8 | 9 / 24 | |
| 1.10.7 | 9 / 24 | |
| 1.10.2 | 9 / 24 | |
| 1.10.1 | 9 / 24 | |
| 1.10.0 | 9 / 24 | |
| 1.9.108 | 9 / 24 | |
| 1.9.106 | 9 / 24 | |
| 1.9.105 | 9 / 24 | |
| 1.9.97 | 9 / 24 | |
| 1.9.96 | 9 / 24 | |
| 1.9.91 | 9 / 24 | |
| 1.9.90 | 9 / 25 | |
| 1.9.89 | 9 / 25 | |
| 1.9.88 | 9 / 25 | |
| 1.9.87 | 9 / 25 | |
| 1.9.86 | 9 / 25 | |
| 1.9.85 | 9 / 25 | |
| 1.9.84 | 9 / 25 | |
| 1.9.83 | 9 / 25 | |
| 1.9.82 | 9 / 25 | |
| 1.9.81 | 9 / 25 | |
| 1.9.77 | 10 / 25 |
v1.10.60
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.55
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.54
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.53
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.52
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.51
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.50
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.49
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.48
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.47
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.46
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.44
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.10.43
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.