← Home

@jupyterlab/markdownviewer

npm Repository Homepage
100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

darianjasongroutjtpiokrassowskijupyterlab-release-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-removed AI (maintainer-change): JupyterLab consolidates releases under jupyterlab-release-bot; maintainer list changes are expected org-level housekeeping. ai
provenance publisher-changed AI (provenance): JupyterLab migrated release automation from jupyterlab-release-bot to GitHub Actions with SLSA provenance. This is a documented, legitimate transition for the jupyterlab org. ai
publish-pattern dormant-publish AI (publish-pattern): JupyterLab is a monorepo; individual sub-packages like markdownviewer may have long gaps between patch releases while the project remains active. Not indicative of takeover. ai
bogus-package bogus-package AI (bogus-package): Sub-packages in large monorepos (like jupyterlab) typically lack standalone README code blocks and keywords. Not a spam/bogus signal for this package. ai

Versions (showing 100 of 132)

Version Deps Published
4.6.2 10 / 2
4.6.1 10 / 2
4.5.10 10 / 2
4.5.8 10 / 2
4.5.7 10 / 2
4.5.6 10 / 2
4.5.5 10 / 2
4.5.4 10 / 2
4.5.3 10 / 2
4.5.2 10 / 2
4.5.1 10 / 2
4.5.0 10 / 2
4.4.10 10 / 2
4.4.9 10 / 2
4.4.8 10 / 2
4.4.7 10 / 2
4.4.6 10 / 2
4.4.5 10 / 2
4.4.4 10 / 2
4.4.3 10 / 2
4.4.2 10 / 2
4.4.1 10 / 2
4.4.0 10 / 2
4.3.8 10 / 2
4.3.7 10 / 2
4.3.6 10 / 2
4.3.5 10 / 2
4.3.4 10 / 2
4.3.3 10 / 2
4.3.2 10 / 2
4.3.1 10 / 2
4.3.0 10 / 2
4.2.7 10 / 2
4.2.6 10 / 2
4.2.5 10 / 2
4.2.4 10 / 2
4.2.3 10 / 2
4.2.2 10 / 2
4.2.1 10 / 2
4.2.0 10 / 2
4.1.8 10 / 3
4.1.7 10 / 3
4.1.6 10 / 3
4.1.5 10 / 3
4.1.4 10 / 3
4.1.3 10 / 3
4.1.2 10 / 3
4.1.1 10 / 3
4.1.0 10 / 3
4.0.13 10 / 3
4.0.12 10 / 3
4.0.11 10 / 3
4.0.10 10 / 3
4.0.9 10 / 3
4.0.8 10 / 3
4.0.7 10 / 3
4.0.6 10 / 3
4.0.5 10 / 3
4.0.4 10 / 3
4.0.3 10 / 3
4.0.2 10 / 3
4.0.1 10 / 3
4.0.0 10 / 3
3.6.8 8 / 3
3.6.7 8 / 3
3.6.6 8 / 3
3.6.5 8 / 3
3.6.4 8 / 3
3.6.3 8 / 3
3.6.2 8 / 3
3.6.1 8 / 3
3.6.0 8 / 3
3.5.3 8 / 3
3.5.2 8 / 3
3.5.1 8 / 3
3.5.0 8 / 3
3.4.8 8 / 3
3.4.7 8 / 3
3.4.6 8 / 3
3.4.5 8 / 3
3.4.4 8 / 3
3.4.3 8 / 3
3.4.2 8 / 3
3.4.1 8 / 3
3.4.0 8 / 3
3.3.4 8 / 3
3.3.3 8 / 3
3.3.2 8 / 3
3.3.1 8 / 3
3.3.0 8 / 3
3.2.9 8 / 3
3.2.8 8 / 3
3.2.7 8 / 3
3.2.6 8 / 3
3.2.5 8 / 3
3.2.4 8 / 3
3.2.3 8 / 3
3.2.2 8 / 3
3.2.1 8 / 3
3.2.0 8 / 3
Showing 100 of 132 Next page →

v4.6.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.6.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.5.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.