← Home

@jupyterlab/statusbar

npm Repository Homepage

JupyterLab statusbar package.

100
Versions
BSD-3-Clause
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

darianjasongroutjtpiokrassowskijupyterlab-release-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@jupyterlab/observables AI (phantom-deps): Same-org @jupyterlab package declared for config/bundling; not a real phantom dep risk. ai
phantom-deps phantom-dep:react-dom AI (phantom-deps): Declared for bundling/peer dependency purposes in JupyterLab extensions; pattern is consistent across the ecosystem. ai
phantom-deps phantom-dep:@jupyterlab/cells AI (phantom-deps): Same-org @jupyterlab package declared for config/bundling; not a real phantom dep risk. ai
phantom-deps phantom-dep:@jupyterlab/tooltip AI (phantom-deps): Same-org @jupyterlab package declared for config/bundling; not a real phantom dep risk. ai
phantom-deps phantom-dep:@jupyterlab/mainmenu AI (phantom-deps): Same-org @jupyterlab package declared for config/bundling; not a real phantom dep risk. ai
phantom-deps phantom-dep:@phosphor/virtualdom AI (phantom-deps): Referenced in config files for JupyterLab extension bundling; stable pattern for this package. ai
phantom-deps phantom-dep:@jupyterlab/inspector AI (phantom-deps): Same-org @jupyterlab package declared for config/bundling; not a real phantom dep risk. ai
phantom-deps phantom-dep:@phosphor/application AI (phantom-deps): Referenced in config files for JupyterLab extension bundling; stable pattern for this package. ai
phantom-deps phantom-dep:@jupyterlab/docregistry AI (phantom-deps): Same-org @jupyterlab package declared for config/bundling; not a real phantom dep risk. ai
phantom-deps phantom-dep:@phosphor/commands AI (phantom-deps): Referenced in config files for JupyterLab extension bundling; stable pattern for this package. ai
phantom-deps phantom-dep:@phosphor/domutils AI (phantom-deps): Referenced in config files for JupyterLab extension bundling; stable pattern for this package. ai
dependencies unvetted-dep:@jupyterlab/console AI (dependencies): First-party JupyterLab org package; expected dependency for a JupyterLab extension. ai
dependencies unvetted-dep:@jupyterlab/tooltip AI (dependencies): First-party JupyterLab org package; expected dependency for a JupyterLab extension. ai
dependencies unvetted-dep:@jupyterlab/mainmenu AI (dependencies): First-party JupyterLab org package; expected dependency for a JupyterLab extension. ai
dependencies unvetted-dep:@jupyterlab/inspector AI (dependencies): First-party JupyterLab org package; expected dependency for a JupyterLab extension. ai
provenance no-provenance AI (provenance): Package predates Sigstore provenance availability (published 2018); absence is expected and not a risk signal. ai
provenance publisher-changed AI (provenance): JupyterLab migrated releases to GitHub Actions with SLSA provenance; publisher change from jupyterlab-release-bot to GitHub Actions is a documented, legitimate CI/CD transition for this org. ai

Versions (showing 100 of 176)

Version Deps Published
4.6.2 8 / 5
4.6.1 8 / 5
4.6.0 8 / 5
4.5.10 8 / 5
4.5.8 8 / 5
4.5.7 8 / 5
4.5.6 8 / 5
4.5.5 8 / 5
4.5.4 8 / 5
4.5.3 8 / 5
4.5.2 8 / 5
4.5.1 8 / 5
4.5.0 8 / 5
4.4.10 8 / 5
4.4.9 8 / 5
4.4.8 8 / 5
4.4.7 8 / 5
4.4.6 8 / 5
4.4.5 8 / 5
4.4.4 8 / 5
4.4.3 8 / 5
4.4.2 8 / 5
4.4.1 8 / 5
4.4.0 8 / 5
4.3.8 8 / 5
4.3.7 8 / 5
4.3.6 8 / 5
4.3.5 8 / 5
4.3.4 8 / 5
4.3.3 8 / 5
4.3.2 8 / 5
4.3.1 8 / 5
4.3.0 8 / 5
4.2.7 8 / 5
4.2.6 8 / 5
4.2.5 8 / 5
4.2.4 8 / 5
4.2.3 8 / 5
4.2.2 8 / 5
4.2.1 8 / 5
4.2.0 8 / 5
4.1.8 8 / 5
4.1.7 8 / 5
4.1.6 8 / 5
4.1.5 8 / 5
4.1.4 8 / 5
4.1.3 8 / 5
4.1.2 8 / 5
4.1.1 8 / 5
4.1.0 8 / 5
4.0.13 8 / 5
4.0.12 8 / 5
4.0.11 8 / 5
4.0.10 8 / 5
4.0.9 8 / 5
4.0.8 8 / 5
4.0.7 8 / 5
4.0.6 8 / 5
4.0.5 8 / 5
4.0.4 8 / 5
4.0.3 8 / 5
4.0.2 8 / 5
4.0.1 8 / 5
4.0.0 8 / 5
3.6.8 14 / 7
3.6.7 14 / 7
3.6.6 14 / 7
3.6.5 14 / 7
3.6.4 14 / 7
3.6.3 14 / 7
3.6.2 14 / 7
3.6.1 14 / 7
3.6.0 14 / 7
3.5.3 14 / 6
3.5.2 14 / 6
3.5.1 14 / 6
3.5.0 14 / 6
3.4.8 14 / 6
3.4.7 14 / 6
3.4.6 14 / 6
3.4.5 14 / 6
3.4.4 14 / 6
3.4.3 14 / 6
3.4.2 14 / 6
3.4.1 14 / 6
3.4.0 14 / 6
3.3.4 14 / 6
3.3.3 14 / 6
3.3.2 14 / 6
3.3.1 14 / 6
3.3.0 14 / 6
3.2.9 14 / 6
3.2.8 14 / 6
3.2.7 14 / 6
3.2.6 14 / 6
3.2.5 14 / 6
3.2.4 14 / 6
3.2.3 14 / 6
3.2.2 14 / 6
3.2.1 14 / 6
Showing 100 of 176 Next page →

v4.6.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.6.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.5.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.