← Home

@jupyterlab/ui-components

npm Repository Homepage

JupyterLab - UI components written in React

100
Versions
BSD-3-Clause
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

darianjasongroutjtpiokrassowskijupyterlab-release-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@blueprintjs/core AI (dependencies): BlueprintJS is a well-known Palantir React UI library; a legitimate dependency in JupyterLab 3.x branch. Not a security concern. ai
dependencies unvetted-dep:@blueprintjs/select AI (dependencies): BlueprintJS Select is part of the Palantir BlueprintJS suite; legitimate dependency in JupyterLab 3.x branch. ai
phantom-deps phantom-dep:@lumino/commands AI (phantom-deps): @lumino/commands is declared for transitive/config use in JupyterLab; not a security concern for this package. ai
dependencies unvetted-dep:@lumino/polling AI (dependencies): Official Jupyter/Lumino package; legitimate dependency for JupyterLab ecosystem packages. ai
dependencies unvetted-dep:@lumino/widgets AI (dependencies): Official Jupyter/Lumino package; core widget library for JupyterLab. ai
dependencies unvetted-dep:@lumino/commands AI (dependencies): Official Jupyter/Lumino package; legitimate dependency. ai
dependencies unvetted-dep:@lumino/algorithm AI (dependencies): Official Jupyter/Lumino package; legitimate dependency. ai
dependencies unvetted-dep:@lumino/coreutils AI (dependencies): Official Jupyter/Lumino package; legitimate dependency. ai
dependencies unvetted-dep:@lumino/messaging AI (dependencies): Official Jupyter/Lumino package; legitimate dependency. ai
dependencies unvetted-dep:@lumino/signaling AI (dependencies): Official Jupyter/Lumino package; legitimate dependency. ai
dependencies unvetted-dep:@lumino/disposable AI (dependencies): Official Jupyter/Lumino package; legitimate dependency. ai
dependencies unvetted-dep:typestyle AI (dependencies): typestyle is a well-established CSS-in-JS library; legitimate dependency for a UI components package. ai
dependencies unvetted-dep:@lumino/virtualdom AI (dependencies): Official Jupyter/Lumino package; legitimate dependency. ai
dependencies unvetted-dep:@jupyterlab/coreutils AI (dependencies): Official JupyterLab sibling package; expected dependency within the monorepo. ai
dependencies unvetted-dep:@jupyter/web-components AI (dependencies): Official Jupyter web components package; legitimate dependency for JupyterLab UI. ai
dependencies unvetted-dep:@jupyterlab/observables AI (dependencies): Official JupyterLab sibling package; expected dependency within the monorepo. ai
dependencies unvetted-dep:@jupyterlab/translation AI (dependencies): Official JupyterLab sibling package; expected dependency within the monorepo. ai
dependencies unvetted-dep:@jupyter/react-components AI (dependencies): Official Jupyter React components package; legitimate dependency for JupyterLab UI. ai
dependencies unvetted-dep:@jupyterlab/rendermime-interfaces AI (dependencies): Official JupyterLab sibling package; expected dependency within the monorepo. ai
dependencies unvetted-dep:@lumino/properties AI (dependencies): Official Jupyter/Lumino package; legitimate dependency. ai
dependencies unvetted-dep:@rjsf/core AI (dependencies): react-jsonschema-form (@rjsf/core) is a widely-used, legitimate form library; expected dependency for JupyterLab UI. ai
dependencies unvetted-dep:@rjsf/utils AI (dependencies): Sibling utility package of @rjsf/core; same rationale applies. ai

Versions (showing 100 of 144)

Version Deps Published
4.6.2 21 / 7
4.6.1 21 / 7
4.5.10 21 / 7
4.5.8 21 / 7
4.5.7 21 / 7
4.5.6 21 / 7
4.5.5 21 / 7
4.5.4 21 / 7
4.5.3 21 / 7
4.5.2 21 / 7
4.5.1 21 / 7
4.5.0 21 / 7
4.4.10 21 / 7
4.4.9 21 / 7
4.4.8 21 / 7
4.4.7 21 / 7
4.4.6 21 / 7
4.4.5 21 / 7
4.4.4 21 / 7
4.4.3 21 / 7
4.4.2 21 / 7
4.4.1 21 / 7
4.4.0 21 / 7
4.3.8 21 / 7
4.3.7 21 / 7
4.3.6 21 / 7
4.3.5 21 / 7
4.3.4 21 / 7
4.3.3 21 / 7
4.3.2 21 / 7
4.3.1 21 / 7
4.3.0 21 / 7
4.2.7 21 / 7
4.2.6 21 / 7
4.2.5 21 / 7
4.2.4 21 / 7
4.2.3 21 / 7
4.2.2 21 / 7
4.2.1 21 / 7
4.2.0 21 / 7
4.1.8 21 / 8
4.1.7 21 / 8
4.1.6 21 / 8
4.1.5 21 / 8
4.1.4 21 / 8
4.1.3 21 / 8
4.1.2 21 / 8
4.1.1 21 / 8
4.1.0 21 / 8
4.0.13 19 / 8
4.0.12 19 / 8
4.0.11 19 / 8
4.0.10 19 / 8
4.0.9 19 / 8
4.0.8 19 / 8
4.0.7 19 / 8
4.0.6 19 / 8
4.0.5 19 / 8
4.0.4 19 / 8
4.0.3 19 / 8
4.0.2 19 / 8
4.0.1 19 / 8
4.0.0 19 / 8
3.6.8 15 / 15
3.6.6 15 / 15
3.6.5 15 / 15
3.6.4 15 / 15
3.6.3 15 / 15
3.6.2 15 / 15
3.6.1 15 / 15
3.6.0 15 / 15
3.5.3 15 / 15
3.5.2 15 / 15
3.5.1 15 / 15
3.5.0 15 / 15
3.4.8 15 / 15
3.4.7 15 / 15
3.4.6 15 / 15
3.4.5 15 / 15
3.4.4 15 / 15
3.4.3 15 / 15
3.4.2 15 / 15
3.4.1 15 / 15
3.4.0 15 / 15
3.3.4 14 / 15
3.3.3 14 / 15
3.3.2 14 / 15
3.3.1 14 / 15
3.3.0 14 / 15
3.2.9 13 / 15
3.2.8 13 / 15
3.2.7 13 / 15
3.2.6 13 / 15
3.2.5 13 / 15
3.2.4 13 / 15
3.2.3 13 / 15
3.2.2 13 / 15
3.2.1 13 / 15
3.2.0 13 / 15
3.1.18 13 / 15
Showing 100 of 144 Next page →

v4.6.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.6.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.5.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.