@jbrowse/react-circular-genome-view2
JBrowse 2 circular genome view React component
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publisher with SLSA attestation is expected for this monorepo's release pipeline. | ai | |
| source-diff | net-exec-file:dist/react-circular-genome-view.umd.production.min.js | AI (source-diff): Standard webpack UMD bundle for a genomics visualization library; network calls and dynamic code are part of the bundled runtime, not malware. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase is due to addition of a new UMD production bundle alongside the existing ESM build — expected for this package. | ai | |
| phantom-deps | phantom-dep:@emotion/cache | AI (phantom-deps): Declared as direct dep; used transitively via MUI/emotion stack, not a phantom dep concern. | ai | |
| phantom-deps | phantom-dep:@emotion/react | AI (phantom-deps): Declared as direct dep; used transitively via MUI/emotion stack, not a phantom dep concern. | ai | |
| phantom-deps | phantom-dep:@emotion/styled | AI (phantom-deps): Declared as direct dep; used transitively via MUI/emotion stack, not a phantom dep concern. | ai |
Versions (showing 22 of 22)
| Version | Deps | Published |
|---|---|---|
| 4.3.0 | 18 / 0 | |
| 4.2.1 | 18 / 0 | |
| 4.2.0 | 18 / 0 | |
| 4.1.15 | 18 / 0 | |
| 4.1.14 | 18 / 0 | |
| 4.1.13 | 18 / 0 | |
| 4.1.12 | 18 / 0 | |
| 4.1.11 | 18 / 0 | |
| 4.1.10 | 18 / 0 | |
| 4.1.9 | 18 / 0 | |
| 4.1.8 | 18 / 0 | |
| 4.1.7 | 18 / 0 | |
| 4.1.6 | 18 / 0 | |
| 4.1.5 | 18 / 0 | |
| 4.1.4 | 18 / 0 | |
| 4.1.3 | 18 / 0 | |
| 4.1.1 | 18 / 0 | |
| 4.0.4 | 18 / 0 | |
| 4.0.3 | 18 / 0 | |
| 4.0.2 | 18 / 0 | |
| 4.0.1 | 18 / 0 | |
| 4.0.0 | 18 / 0 |
v4.1.14
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.